CVE-2026-43785

Undergoing Analysis Undergoing Analysis - In Progress

File Permission Modification in Apple iOS and macOS

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: Apple Inc.

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-04

NVD

CVE-2026-43785

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ios	27
apple	ipad_os	27
apple	macos_golden_gate	27
apple	macos_sequoia	15.8
apple	macos_tahoe	26.7
apple	tv_os	27
apple	vision_os	27

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a permissions issue where an app could modify a file it was only supposed to read. It was fixed in multiple Apple operating systems including iOS 27, iPadOS 27, and various macOS versions.

Detection Guidance

This vulnerability involves an app modifying a file it only had read permissions for. Detection would require checking file integrity and permissions on affected systems. Use commands like 'ls -la' to review file permissions and 'find' to locate modified files. Compare file hashes before and after suspected activity.

Impact Analysis

An attacker could exploit this to alter files they should only be able to view, potentially leading to data corruption, unauthorized changes, or further system compromise.

Compliance Impact

The provided CVE does not specify direct impacts on compliance with GDPR, HIPAA, or other standards. The vulnerability involves an app modifying files it only had read permissions for, which could potentially lead to unauthorized data changes or exfiltration. However, explicit compliance implications are not detailed in the given context.

Mitigation Strategies

Update affected systems to the latest versions: iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, or visionOS 27 to address the permissions issue.

Hi! I’m here to help you understand CVE-2026-43785. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70