2026-07-27 20:13CVE-2026-43766apple
PUBLISHED5.2

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.

Problem type

  • An attacker with physical access to a locked device may be able to view sensitive user information

Affected products

Apple

macOS

< 14.8.8 - AFFECTED

< 15.7.8 - AFFECTED

< 26.6 - AFFECTED

References

GitHub Security Advisories

GHSA-4jxm-4x4x-3vxx

An authorization issue was addressed with improved state management. This issue is fixed in macOS...

https://github.com/advisories/GHSA-4jxm-4x4x-3vxx

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.

JSON source

https://cveawg.mitre.org/api/cve/CVE-2026-43766
Click to expand
{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "cveMetadata": {
    "cveId": "CVE-2026-43766",
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "dateUpdated": "2026-07-27T20:13:41.215Z",
    "dateReserved": "2026-05-01T22:46:27.817Z",
    "datePublished": "2026-07-27T20:13:41.215Z",
    "state": "PUBLISHED"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple",
        "dateUpdated": "2026-07-27T20:13:41.215Z"
      },
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information."
        }
      ],
      "affected": [
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "version": "0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "14.8.8"
            },
            {
              "version": "0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "15.7.8"
            },
            {
              "version": "0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "26.6"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "An attacker with physical access to a locked device may be able to view sensitive user information"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://support.apple.com/en-us/128067"
        },
        {
          "url": "https://support.apple.com/en-us/128071"
        },
        {
          "url": "https://support.apple.com/en-us/128072"
        }
      ]
    }
  }
}