CVE-2026-43652
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
Risk Assessment
Access to protected user data by an app may lead to privacy breaches and data security issues.
Recommendation
It is recommended to update to macOS Tahoe 26.5 to mitigate this vulnerability.
Other vulnerabilities in macOS Tahoe
See all- CVE-2025-46315High
A permissions issue was addressed with additional restrictions. An app may be able to access protected user data.
- CVE-2025-46313Medium
A logging issue was addressed with improved data redaction. An app may be able to access sensitive user data.
- CVE-2025-43339Medium
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1.
- CVE-2026-28976High
An information leakage was addressed with additional validation in macOS Tahoe 26.5, which could allow an app to gain root privileges.
- CVE-2025-43296Medium
A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks.
Original NVD description (English source)
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be able to access protected user data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS