
Just dropped a PoC for CVE-2026-43786. Local privilege escalation to root through macOS CoreServices. Patched in Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. https://github.com/Malwation/CVE-2026-43786 @malwation https://t.co/R26viUJ5oK
Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.

Just dropped a PoC for CVE-2026-43786. Local privilege escalation to root through macOS CoreServices. Patched in Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. https://github.com/Malwation/CVE-2026-43786 @malwation https://t.co/R26viUJ5oK

🚨 PoC RELEASED: A public PoC is now available for CVE-2026-43786, a macOS privilege-escalation vulnerability rated CVSS 7.8. The flaw could allow an app to gain root privileges due to insufficient entitlement checks. ⚠️ Affected macOS versions include releases prior to Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. 🔴 Apple has addressed the issue with additional entitlement checks. Update macOS. 🔗 https://github.com/malwation/cve-2026-43786 #Apple #macOS #CVE #PoC #CyberSecurity #Infosec

🚨 CVE-2026-43786 macOS CoreServices local app to root. CVSS 7.8. Apple's line is short. an app may be able to gain root privileges. Malwation shipped the C PoC and a video of it landing. https://github.com/Malwation/CVE-2026-43786 #macOS #ExploitDev #InfoSec https://t.co/67LjbTHcCO

A PoC/exploit has been discovered for vulnerability CVE-2026-43786 PT ID: PT-2026-91500 Vendor: Apple Product: macOS Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges. References: • https://dbu.gs/vulnerability/PT-2026-91500 • https://github.com/malwation/cve-2026-43786
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |