CVE-2026-43783

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.6

Description A race condition exists where a malicious application can gain root privileges. This is achieved through a single XPC request to the DesktopServicesHelper component, allowing an attacker to perform an arbitrary chown (change ownership) of any path on the disk. A race condition is a situation where the system's behavior depends on the sequence or timing of uncontrollable events.

Recommendations Update to macOS Tahoe 26.6.