CVE-2026-43698

CVSS 3.1: 7.8 high
EPSS: <1%p11
Published: Jul 27, 2026 · Jul 27, 2026
Modified: Oct 24, 2026

Analyze CVE-2026-43698 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An injection issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

Vendors: apple

Products: macos

Weakness: CWE-88

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

2 stories

The Apple Security Update Review for September 2026

Apple's September 2026 updates patch 45+ flaws, including a 9.8 Screen Sharing authentication bypass (CVE-2026-65400) already listed in CISA's KEV.

Zero Day Initiative BlogSep 16, 19:58 UTC · Sep 16, 2026VulnerabilityExploitedCVE-2026-65400 CVE-2026-65414 CVE-2026-43692+273 · 1 read

Apple Updates Everything, (Mon, Sep 14th)

Apple patched a record 261 vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS 27, and other platforms, with none flagged as exploited.

SANS Internet Storm CenterSep 14, 18:33 UTC · Sep 14, 2026VulnerabilityCVE-2022-3437 CVE-2026-20683 CVE-2026-28899+276 · 3 reads