This vulnerability (CVE-2026-43652) in Apple macOS arises from a permissions issue that could allow an application to access protected user data without proper authorization. Apple addressed this issue by implementing additional restrictions in macOS Tahoe 26.5. The CVSS score of 7.5 reflects a high impact on confidentiality with no required privileges or user interaction for exploitation. The vulnerability is categorized under CWE-284 (Improper Access Control). No known exploits have been reported, and no vendor advisory explicitly detailing patch status or remediation level is provided beyond the mention of the fix in macOS Tahoe 26.5.

An attacker could exploit this vulnerability to access protected user data on affected macOS systems, potentially leading to unauthorized disclosure of sensitive information. The confidentiality impact is high, while integrity and availability are not affected. There are no reports of active exploitation in the wild.

Apple has addressed this issue with additional restrictions in macOS Tahoe 26.5. Users and administrators should ensure their systems are updated to this version or later to mitigate the vulnerability. Patch status is not explicitly confirmed beyond this information; therefore, verify with Apple's official security advisories for the latest remediation guidance.