CVE-2026-43760
HIGHmacOS < 14.8.8 and < 26.6 - Unprotected User-Sensitive Data Access via Improper Access Restrictions
Title source: llmDescription
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.
References (3)
Core 3
Core References
Various Sources
https://reverse.put.as/2026/07/29/its-a-pre-auth-stupid/
Scores
CVSS v3
8.6
EPSS
0.0011
EPSS Percentile
1.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-284
Status
published
Products (3)
Apple/macOS
< 14.8.8
Apple/macOS
< 26.6
apple/macos
14.0 - 14.8.8
Published
Jul 27, 2026
Tracked Since
Jul 28, 2026