CVE-2026-43692
published 2026-09-14CVE-2026-43692: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote…
PriorityP351high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.70%
52.5th percentile
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 15.8 | 15.8 |
| apple | macos | < 26.7 | 26.7 |
| apple | macos | < 27 | 27 |
| apple | macos | >= 15.0 < 15.8 | 15.8 |
| apple | macos | >= 26.0 < 26.7 | 26.7 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple macOS up to 15.7/26/26.6 input validation (EUVD-2026-77996)
vuldb·2026-09-15·CVSS 8.8
CVE-2026-43692 [HIGH] Apple macOS up to 15.7/26/26.6 input validation (EUVD-2026-77996)
A vulnerability categorized as very critical has been discovered in Apple macOS up to 15.7/26/26.6. This affects an unknown function. Such manipulation leads to improper input validation.
This vulnerability is documented as CVE-2026-43692. The attack can be executed remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
GHSA
A validation issue was addressed with improved input sanitization.
ghsa_unreviewed·2026-09-14
CVE-2026-43692 [HIGH] CWE-20 A validation issue was addressed with improved input sanitization.
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.
No detection rules found.
No public exploits indexed.
2026-09-14
Published