CVE-2026-43774 — macOS Sequoia — Fixed in 15.7.8; macOS Sonoma — Fixed in 14.8.8; macOS Tahoe — Fixed in 26.6

Medium5.5 Published on Jul 27, 2026

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.

Fixed versions

Choose the version for your installed product and release branch.

Product	Fixed versions
macOS Sequoia	15.7.8
macOS Sonoma	14.8.8
macOS Tahoe	26.6

Versions stated in the NVD description

CVSS score5.5 / 10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness type (CWE)CWE-787

Vendorsapple

Affected products

Vendors	Product	Versions
apple	macos	< 14.8.8

Vulnerabilities

Cybersecurity, August 20 Threats: From Gogs to macOS, Signed Drivers, and Targeted Campaigns

Explore critical cybersecurity threats from August 20, including Gogs RCE, macOS vulnerabilities, and abuse of signed drivers.

Aug 20, 202621:10 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Fixed versions

Affected products

Related articles

Cybersecurity, August 20 Threats: From Gogs to macOS, Signed Drivers, and Targeted Campaigns