VDB

CVE-2026-43749

CVE-2026-43749 PUBLISHED CVSS 7.8 HIGH

Reported by apple · Published July 27, 2026

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
ApplemacOS0, 0, 0
ApplemacOS0, 0, 0

Timeline

  • Jul 27, 2026 CVE Published
  • Jul 28, 2026 Coalition ESS Score
  • Jul 28, 2026 CVE Updated
  • Jul 28, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›