CVE-2026-43782 is a vulnerability in Apple macOS where an application may be able to access sensitive user data due to insufficient access checks. Apple has fixed this issue by implementing improved checks in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS v3.1 base score is 5.5, indicating a medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An attacker could exploit this vulnerability to gain unauthorized access to sensitive user data on affected macOS systems. The confidentiality of user data is impacted, but there is no impact on integrity or availability. The attack requires local access and user interaction, and no privileges are required to attempt exploitation.

This vulnerability has been fixed by Apple in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 through improved access checks. Users and administrators should update to these fixed versions to remediate the issue. Patch status is confirmed by the vendor advisory indicating these versions contain the fix.