What is CVE-2026-43728?

CVE-2026-43728 is a high-severity vulnerability in Apple Macos, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.5/10. Published 2026-07-27.

How severe is CVE-2026-43728?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Apple Macos

CVE-2026-43728

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.6. An attacker may be able to modify the state of the Keychain.

Vulnerability class: Race Condition

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Apple Macos — versions 0

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

product-security@apple.com

Frequently asked questions

What is CVE-2026-43728?: CVE-2026-43728 is a high-severity vulnerability in Apple Macos, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.5/10. Published 2026-07-27.
How severe is CVE-2026-43728?: High severity. CVSS v3 base score is 7.5 out of 10.