PT-2026-65157 · Apple · Apple Macos

CVE-2026-43749 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-43749

Produtos afetados

Apple Macos

Referências · 4

• https://support.apple.com/en-us/128072 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-43749 · Nota de Segurança
• https://support.apple.com/en-us/128067 · Nota
• https://support.apple.com/en-us/128071 · Nota