Research

From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS

Apple’s latest macOS update addresses two vulnerabilities in its Screen Sharing server, including one that enables pre-authenticated remote code execution.

Read at Huntress

Vendor

Apple

Product

macOS

Exposure class

Operating system

• Huntress (huntress.com)
• CVE-2026-43760 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-65400 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 52
   Research ZDI 16 Sep 2026

   The Apple Security Update Review for September 2026

   Exploited CVE-2026-65400CVE-2026-65414CVE-2026-65346+57 more Apple
2. 16
   Research Insikt Group 8 Sep 2026

   August 2026 CVE Landscape

   CVE-2025-62593CVE-2026-72898CVE-2026-9198+57 more
3. 59
   CISA advisory CISA 18 Aug 2026

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2026-33824CVE-2026-55040CVE-2026-59310+1 more Microsoft Apple
4. 62
   KEV NVD 6 Aug 2026

   Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without…

   KEV Fix available CVE-2026-65400 Apple
5. 16
   CVE NVD 27 Jul 2026

   An access issue was addressed with improved access restrictions.

   Fix available CVE-2026-43760 Apple