Skip to main content

Apple EUVDEUVD-2026-49461

| CVE-2026-43782 MEDIUM
Information Exposure (CWE-200)
2026-07-27 apple GHSA-chxv-3mf7-4wrf
5.5
CVSS 3.1 · Vendor: apple
Share

Severity by source

Vendor (apple) PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

5
Analysis Generated
Jul 28, 2026 - 15:30 vuln.today
CVSS changed
Jul 28, 2026 - 15:22 NVD
5.5 (MEDIUM)
Patch available
Jul 27, 2026 - 21:17 EUVD
CVE Published
Jul 27, 2026 - 20:15 cve.org
UNKNOWN (no severity yet)
CVE Published
Jul 27, 2026 - 20:15 cve.org
MEDIUM 5.5

DescriptionCVE.org

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.

AnalysisAI

An information disclosure vulnerability in Apple macOS allows a local malicious application to access sensitive user data without proper authorization. This issue was resolved in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. No active exploitation or public exploit code has been identified at this time, and EPSS indicates a very low probability of exploitation.

Share

EUVD-2026-49461 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy