{"uuid": "1ca290e8-d3a9-47be-9391-07eb192ce0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43760", "type": "seen", "source": "https://t.me/pphm_HackerNews/2666", "content": "\ud83d\udd34 Apple Screen Sharing Vulnerability Exploited to Execute Command as Root \n\nA newly disclosed logic flaw in macOS Screen Sharing shows how a feature meant only to grant screen-viewing access can be twisted into a path for full root command execution.\n\nThe issue, tracked as CVE-2026-43760, affects the screensharing service and its file-copy helpers, SSFileCopySender and SSFileCopyReceiver, on macOS systems where Screen Sharing or Remote Management is enabled with the legacy VNC password option turned on. \n\nThe root cause lies in how Apple's Screen Sharing service handles two very different authentication paths. When a user connects through native Apple authentication, the service correctly identifies them as a macOS account and runs any file-copy operations under that user's own permissions.", "creation_timestamp": "2026-08-21T23:00:05.946648Z"}