An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Apple |
|
No data.
No data.
References
History
Tue, 28 Jul 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authorization Issue Allowing Apps to Access Sensitive Data in Safari and macOS | |
| Weaknesses | CWE-284 |
Tue, 28 Jul 2026 01:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple macos Apple safari |
|
| Vendors & Products |
Apple
Apple macos Apple safari |
Mon, 27 Jul 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: apple
Published: 2026-07-27T20:13:57.724Z
Updated: 2026-07-27T20:13:57.724Z
Reserved: 2026-05-01T22:46:27.820Z
Link: CVE-2026-43792
Vulnrichment
No data.
NVD
No data.
Redhat
No data.