CVE-2026-43760
published 2026-07-27CVE-2026-43760: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be…
PriorityP346high8.6CVSS 3.1
AVNACLPRNUINSUCHILAL
EPSS
0.41%
34.4th percentile
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 14.8.8 | 14.8.8 |
| apple | macos | < 26.6 | 26.6 |
| apple | macos | < 26.7 | 26.7 |
| apple | macos | >= 14.0 < 14.8.8 | 14.8.8 |
| apple | macos | >= 26.0 < 26.6 | 26.6 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple macOS up to 14.8.7/26.5 access control
vuldb·2026-07-28
CVE-2026-43760 [LOW] Apple macOS up to 14.8.7/26.5 access control
A vulnerability was found in Apple macOS up to 14.8.7/26.5. It has been declared as problematic. Affected is an unknown function. Such manipulation leads to improper access controls.
This vulnerability is referenced as CVE-2026-43760. It is possible to launch the attack remotely. No exploit is available.
It is recommended to upgrade the affected component.
GHSA
An access issue was addressed with improved access restrictions.
ghsa_unreviewed·2026-07-27
CVE-2026-43760 [MEDIUM] CWE-284 An access issue was addressed with improved access restrictions.
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.
No detection rules found.
No public exploits indexed.
Sans Isc
Apple Updates Everything, (Mon, Sep 14th)
blogs_sans_isc·2026-09-14·CVSS 6.5
CVE-2022-3437 [MEDIUM] Apple Updates Everything, (Mon, Sep 14th)
Apple Updates Everything
Published: 2026-09-14. Last Updated: 2026-09-14 18:33:44 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
Today, Apple released its annual update across all its operating systems. With that, Apple not only released new features but also patched 261 different vulnerabilities. This is the most vulnerabilities Apple has ever patched, but the increase is not as significant as other vendors' "post-AI" patch releases.
In addition to the major "27" version, Apple also released bug-fix-only releases for the 26 branch of its operating systems and for 15 (Sequioa) for macOS. None of the vulnerabilities is labeled as being exploited. Apple does not note a severity to individual vulnerabilities.
There are some reports about difficulties downloading iOS 27. Users instead
Hackernews
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
blogs_hackernews·2026-08-15·CVSS 9.8
CVE-2026-65400 [CRITICAL] Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC-NL) has warned .
The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impacting the Screen Sharing component that could allow an attacker already on the network to authenticate to the built-in remote desktop feature service without valid credentials.
The updates released by Apple improve state management mechan
Huntress
From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS
blogs_huntress·2026-08-07·CVSS 8.6
CVE-2026-43760 [HIGH] From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS
Acknowledgments : Special thanks to Bryan Masters and Stuart Ashenbrenner for their contributions to this investigation and write - up.
## TL;DR :
If you're running Screen Sharing on macOS and exposing it to the public internet, then we need to talk. While it's generally frowned upon to expose remote access protocols to the world, we understand that some use cases may require it. You do you!
With the uptick in hosted bare-metal Apple devices, such as the Mac mini available for on-demand workloads, SSH and Screen Sharing are commonly enabled by default on any newly provisioned service.
Apple's security releases announced in the last week of July were followed by a flurry of activity, public disclosures of newly patched bugs, and commentary on the scale of the CVEs listed. With this come
Sans Isc
Apple Patches Everything (July 2026), (Wed, Jul 29th)
blogs_sans_isc·2026-07-29·CVSS 5.5
CVE-2026-28849 [MEDIUM] Apple Patches Everything (July 2026), (Wed, Jul 29th)
Apple Patches Everything (July 2026)
Published: 2026-07-29. Last Updated: 2026-07-29 07:32:37 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
I am a bit late with this summary, but this week Apple released updates to all its operating systems and Safari. The Safari update, as usual, targets macOS prior to macOS 26. macOS updates covered the two older versions (14 and 15), while other operating system patches only covered the current 26 versions.
A total of 187 vulnerabilities are addressed in this update. Many cover multiple operating systems. Apple did not label any of the vulnerabilities as already being exploited.
Three vulnerabilities that caught my interest are CVE-2026-28849, CVE-2026-28900, and CVE-2026-28914. These issues appear to be the vulnerability described in https://m
2026-07-27
Published