---
id: CVE-2026-43763
title: A permissions issue was addressed by removing the vulnerable code
summary: >-
  A permissions issue was addressed by removing the vulnerable code. This issue
  is fixed in macOS Sequoia 15.7.8, macOS Sequoia 15.8, macOS Sonoma 14.8.8,
  macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to read files outside
  of its …
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'
cwe:
  - CWE-284
vendor: apple
product: macos
affected:
  - 'macos >= 14.0, < 14.8.8'
  - 'macos >= 15.0, < 15.7.8'
  - 'macos >= 26.0, < 26.6'
patched:
  - macos 26.6
published: '2026-07-27'
updated: '2026-09-14'
sourceUpdated: '2026-09-14T21:17:10.897'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-43763'
references:
  - url: 'https://support.apple.com/en-us/128067'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/128071'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/128072'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149042'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/149043'
    label: product-security@apple.com
tags:
  - nvd
  - cve.org
epss: 0.00175
epssPercentile: 0.07226
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-07-28T14:23:59.673001Z'
ingestedAt: '2026-09-14T21:15:17.545Z'
---

## Overview

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sequoia 15.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to read files outside of its sandbox.

## Affected

- `macos >= 14.0, < 14.8.8`
- `macos >= 15.0, < 15.7.8`
- `macos >= 26.0, < 26.6`

## Remediation

Upgrade past the affected range:

- `macos 26.6`