The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
Apple's record patch cycle fixes 260+ CVEs across iOS 27 and macOS 27, including CUPS remote code execution, with no active exploitation reported.
55
Vulnerability3 · 2 reads
CVE-2026-43791
Input Validation Flaw in macOS Lets Apps Read Arbitrary Files
- CVSS 3.1
- 6.5 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Apple patched a validation and input sanitization flaw in macOS that allows an app to read arbitrary files on the system, bypassing the file-access restrictions normally enforced for third-party apps. Exploitation requires a locally installed app invoking the affected component, so an attacker must first get their app onto a victim's Mac (e.g., via sideloading, a compromised or repackaged legitimate app, or an app that slips past review). Successful abuse can expose any file accessible to the logged-in user — documents, credentials, keychains, and configuration data — though the flaw does not by itself grant code execution or remote access. All Macs running macOS versions older than Sequoia 15.8, Tahoe 26.7, or Golden Gate 27 are affected. No CVSS score has been assigned, no public proof-of-concept exists, and the issue is not on CISA's Known Exploited Vulnerabilities catalog; the fix shipped as part of a record-setting wave of Apple security patches.
What to do: Update to macOS Sequoia 15.8, macOS Tahoe 26.7, or macOS Golden Gate 27 (or later) via System Settings > Software Update on all managed and personal Macs. Because exploitation requires a locally running app, audit installed third-party apps and remove untrusted or non-essential ones, and treat sideloaded or repackaged apps with heightened scrutiny. Monitor for a CVSS score, public PoC, or KEV listing as analysis of Apple's record-setting patch batch progresses.
| Product | Affected |
|---|---|
| Apple macOS Sequoia | versions prior to 15.8 |
| Apple macOS Tahoe | versions prior to 26.7 |
| Apple macOS Golden Gate | versions prior to 27 |
Estimated exposure
massTens of millions of Macs plausibly remain unpatched (base of 100M+ active Macs, only a fraction updated at disclosure) — Apple's active Mac install base is widely estimated at over 100 million devices, and any Mac not yet updated to the fixed releases (Sequoia 15.8, Tahoe 26.7, Golden Gate 27) is vulnerable, so the unpatched population plausibly exceeds 1…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to read arbitrary files.