CVE-2026-43809: Buffer Overflow
Accounts Framework. This issue was addressed with improved data protection.
Other sources
Accounts. A parsing issue in the handling of directory paths was addressed with improved path validation.
— Apple
Accounts. An access issue was addressed with additional sandbox restrictions.
— Apple
afpfs. A buffer overflow was addressed with improved bounds checking.
— Apple
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
— MITRE
apache. This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.
— Apple
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.7.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.8.8
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43809?
CVE-2026-43809 has a risk rating of 53, indicating a notable security concern that needs attention.
What vulnerabilities does CVE-2026-43809 address?
CVE-2026-43809 addresses issues related to buffer overflow, race condition, use after free, input validation, and integer overflow.
How do I fix CVE-2026-43809?
To fix CVE-2026-43809, ensure that you update your Apple macOS to the latest version which includes the security patches.
Which software versions are affected by CVE-2026-43809?
CVE-2026-43809 affects Apple macOS Tahoe, Apple macOS Sequoia, and Apple macOS Sonoma.
What improvements were made in CVE-2026-43809?
CVE-2026-43809 includes improved data protection, enhanced path validation, and additional sandbox restrictions.