Apple Updates Everything, (Mon, Sep 14th)
Apple patched a record 261 vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS 27, and other platforms, with none flagged as exploited.
58
Vulnerability1 · 1 read
CVE-2026-43683
Out-of-Bounds Read in Apple macOS Could Leak Process Memory
- CVSS 3.1
- 7.1 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
CVE-2026-43683 is an out-of-bounds read in Apple's macOS that was fixed with improved bounds checking. A malicious or compromised app running on an affected Mac can trigger the flaw to cause unexpected process termination (a crash) or to disclose process memory, potentially exposing sensitive data held in that process such as tokens or other secrets. The flaw affects macOS Sequoia prior to 15.8, macOS Tahoe prior to 26.7, and macOS Golden Gate prior to 27, with fixes shipping in Apple's broad September 14 'Updates Everything' release wave. No CVSS score has been assigned yet, no public proof of concept exists, and there is no evidence of exploitation in the wild.
What to do: Update to macOS Sequoia 15.8, macOS Tahoe 26.7, or macOS Golden Gate 27 (or later) via System Settings > General > Software Update. Since exploitation requires a malicious app on the Mac, enforce Gatekeeper/notarization policies and restrict software installs to trusted sources. On managed fleets, audit recently added third-party apps and confirm patch compliance against Apple's September security advisory.
| Product | Affected |
|---|---|
| Apple macOS Sequoia | prior to 15.8 |
| Apple macOS Tahoe | prior to 26.7 |
| Apple macOS Golden Gate | prior to 27 |
Estimated exposure
mass≈100M+ devices (active Macs running unpatched Sequoia/Tahoe/Golden Gate) — Apple's installed base is estimated at well over 100 million active Macs and the affected versions are the current-generation macOS releases most of those machines run, though the patched fraction will climb quickly after the September…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory.