CVE-2026-43821: Apple Safari Privilege Escalation Flaw

CVE-2026-43821 Overview

CVE-2026-43821 is an access control vulnerability affecting multiple Apple operating systems and the Safari browser. The flaw allows an application to read files outside of its designated sandbox, breaking a core isolation boundary that Apple platforms rely on to contain untrusted code. Apple addressed the issue by improving access restrictions across its ecosystem. The vulnerability is tracked under CWE-284: Improper Access Control and requires user interaction to trigger over a network attack vector.

Critical Impact
A malicious or compromised app can escape its sandbox to read sensitive files belonging to other applications or the user, enabling data theft and reconnaissance for follow-on attacks.

Affected Products

Apple Safari (versions prior to 26.6)
Apple iOS and iPadOS (versions prior to 26.6)
Apple macOS Tahoe (versions prior to 26.6), tvOS, visionOS, and watchOS (versions prior to 26.6)

Discovery Timeline

2026-07-27 - CVE-2026-43821 published to the National Vulnerability Database (NVD)
2026-07-29 - Last updated in NVD database

Technical Details for CVE-2026-43821

Vulnerability Analysis

CVE-2026-43821 is an improper access control weakness in the sandboxing enforcement used across Apple's operating systems and Safari. The Apple sandbox is designed to restrict each application to a defined set of files, directories, and system resources. When the sandbox policy fails to fully enforce these restrictions, an application can reach files that lie outside its container. Apple's advisories describe the fix as an access issue addressed with improved access restrictions, which indicates the underlying sandbox policy or path-resolution logic did not correctly deny certain read operations. Exploitation requires user interaction, typically by convincing the target to run a crafted application or visit a page that loads malicious content.

Root Cause

The root cause is insufficient access restriction within the sandbox enforcement layer shared by Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The policy did not correctly deny read access to file paths that should be considered outside the app container. Apple's remediation tightens these restrictions so that filesystem read requests originating from a sandboxed process are consistently checked against the intended boundary.

Attack Vector

An attacker delivers a crafted application, extension, or web content that a user opens or installs. Once running under the sandbox, the app issues file read operations targeting paths outside its container. Because the access control check does not fully constrain those operations, the attacker recovers file contents belonging to other apps or user data. The vulnerability impacts confidentiality only; it does not directly permit modification of data or disruption of service.

No verified public proof-of-concept code is available. Consult the Apple security advisories for authoritative technical detail.

Detection Methods for CVE-2026-43821

Indicators of Compromise

Unexpected file read activity from sandboxed applications targeting paths outside their container directories on macOS, such as other apps' ~/Library/Containers/ or user document folders.
Installation of untrusted apps, configuration profiles, or Safari extensions shortly before anomalous filesystem access.
Endpoint telemetry showing sandboxed processes opening files owned by other user accounts or by system daemons.

Detection Strategies

Monitor open() and openat() syscall telemetry from sandboxed processes and flag reads that cross container boundaries.
Correlate Safari or third-party app execution with subsequent access to sensitive directories such as ~/Library/Mail, ~/Library/Messages, or ~/Documents.
Track version metadata across the Apple fleet and identify endpoints still running pre-26.6 builds of Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, or watchOS.

Monitoring Recommendations

Ingest Apple Endpoint Security Framework (ESF) events into a centralized data lake and build queries around cross-container file reads.
Alert on newly installed apps that immediately enumerate user data directories.
Baseline normal file access patterns for Safari and browser extensions, then alert on deviations.

How to Mitigate CVE-2026-43821

Immediate Actions Required

Update all Apple devices to Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
Inventory endpoints and mobile devices to identify hosts still running vulnerable builds and prioritize their patching.
Restrict installation of untrusted apps, profiles, and Safari extensions through MDM policy until patching is complete.

Patch Information

Apple fixed CVE-2026-43821 in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Refer to the vendor advisories for release notes and download links: Apple Support 128066, Apple Support 128067, Apple Support 128068, Apple Support 128069, Apple Support 128070, and Apple Support 128073.

Workarounds

No vendor-supplied workaround exists; the only supported remediation is to install the 26.6 updates.
Reduce exposure by limiting app installations to the App Store and blocking sideloaded or unsigned applications via MDM.
Advise users to avoid opening untrusted files and to disable unnecessary Safari extensions until patched.

bash

# Verify macOS build version and confirm the device is patched
sw_vers
# Trigger managed software update on macOS
sudo softwareupdate -i -a --restart
# Confirm Safari version
/Applications/Safari.app/Contents/MacOS/Safari --version