CVE-2026-43736
App may access sensitive user data on macOS
The flaw is an authorization issue that could allow a malicious app to access sensitive user data without permission. macOS users are affected, particularly those on older versions before Golden Gate 27 and Tahoe 26.7.2. Apple released updates to fix the issue.
Apple macOS · Updated 28 Oct · From 1 of our story and the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeverityNot scoredNo score in the record yet
FixAvailableFixed versions below
Am I affected?
If you run a version older than the fixed one for your line, yes.
| Version line | Fixed in |
|---|---|
| macOS 27 | 27 |
| macOS 26.7 | 26.7.2 |
What to do
- Update your macOS to version 27 (Golden Gate) or later.
- If you are on macOS 26.7, apply the update to version 26.7.2.
What happened
- 26 OctApple released an update fixing the authorization issue in macOS Golden Gate 27 and macOS Tahoe 26.7.2.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2026-43736 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able to acce… | — | No | 0.2% |
Our reporting
26 OctApple patches 329 vulnerabilities across devices, including camera access flawReported elsewhere
9to5Mac · 26 OctApple addressed at least 329 unique security vulnerabilities across today’s system updates ↗The records
CVE-2026-43736 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works