Reported by 2 outlets
CVE-2026-43783 macOS DesktopServicesHelper critical vulnerability
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
CVE-2026-43783 is a critical macOS DesktopServicesHelper vulnerability enabling local privilege escalation to root on macOS 26.5. Details and a proof of concept are public. The vulnerability targets the DesktopServicesHelper service, which runs with elevated privileges. A Russian-language write-up on Habr additionally describes the exploitation path. There is no patch mentioned in the available event content. The exposure is serious given the public PoC and root-level impact, though active exploitation is not confirmed in the event text.
Timeline
-
original reporting
Details and PoC for the critical macOS DesktopServicesHelper vulnerability are public. Learn how CVE-2026-43783 enables root access. # macOS
securityonline.info · 20d ago · September 24th, 2026
Details and PoC for the critical macOS DesktopServicesHelper vulnerability are public. Learn how CVE-2026-43783 enables root access. # macOS
via Mastodon https://securityonline.info/macos-desktopserviceshelper-vulnerability-poc/?utm_source=mastodon&utm_medium=jetpack_social
-
update from habr.com
CVE-2026-43783: Fix privileges — gain root: LPE through DesktopServicesHelper in macOS 26.5
habr.com · 12d ago · October 1st, 2026
CVE-2026-43783: Fix privileges — gain root: LPE through DesktopServicesHelper in macOS 26.5. Hello, Habr! My name is Ilya Andr and I work at... via Mastodon https://habr.com/ru/companies/pt/articles/1088628/