High severity7.8NVD Advisory· Published Sep 14, 2026· Updated Sep 15, 2026
CVE-2026-43689
CVE-2026-43689
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.
Affected products
8- Range: before 26.7, before 27
before 26.7, before 27+ 1 more
- (no CPE)range: before 26.7, before 27
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.7
before Golden Gate 27+ 1 more
- (no CPE)range: before Golden Gate 27
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <27.0
before 27+ 1 more
- (no CPE)range: before 27
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <27.0
Patches
Vulnerability mechanics
References
4- support.apple.com/en-us/149034nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149035nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149038nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149041nvdRelease NotesVendor Advisory
News mentions
2- The vulnpocalypse rains iBugs down on Apple with record-setting number of patchesThe Register Security · Sep 15, 2026
- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026