CVE-2026-43783High· 7.8▾ MidnightPoC availableA race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
— → 7.8
none → high
Last analysed / modified upstream
0.1%
1 GitHub repo
0.1% → 0.2%
A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges.
macos < 26.6Upgrade past the affected range:
macos 26.6Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-64767Critical· 9.8A buffer overflow was addressed with improved bounds checking
CVE-2026-65327High· 8.4A logic issue was addressed with improved checks
CVE-2026-86929High· 8.8An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-113943Medium· 6.5An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-113939Medium· 6.5An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-84496Medium· 6.5An out-of-bounds write issue was addressed with improved bounds checking