This vulnerability (CVE-2026-43792) in Apple Safari arises from an authorization issue related to state management, which could enable an app to access sensitive user data without proper authorization. The issue was resolved in Safari version 26.6 and macOS Tahoe 26.6. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, user interaction needed, and high confidentiality impact without integrity or availability impact. No detailed vendor advisory or patch links are provided, but the description indicates that the fix is included in the specified versions.

An attacker could exploit this vulnerability to gain unauthorized access to sensitive user data through an app leveraging Safari. The confidentiality of user data is impacted, but there is no impact on integrity or availability. The vulnerability requires user interaction but no privileges or complex attack conditions.

The vulnerability is fixed in Safari 26.6 and macOS Tahoe 26.6. Users and administrators should update to these versions or later to remediate the issue. Since no official vendor advisory or patch link is provided, verify the update status through Apple’s official channels. No additional mitigation steps are indicated.