Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to disclose kernel memory.
Published: 2026-07-27
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability allows an application to read kernel memory. Based on the description, the read could potentially expose privileged data such as passwords or system keys. This flaw is classified under CWE-119, which denotes uncontrolled read beyond buffer limits.

Affected Systems

This issue impacts Apple operating systems older than the patched releases: iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, and macOS Sonoma 14.8.8. Any devices running earlier versions could be affected, regardless of device type; newer releases contain the memory handling fix and are not vulnerable.

Risk and Exploitability

The CVSS score of 7.8 rates it as high severity, while the EPSS score of less than 1% indicates a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is local or mediated by a malicious third‑party app, as exploitation requires code execution within an application context. Based on the description, no widespread exploitation is currently documented.

Generated by OpenCVE AI on August 17, 2026 at 23:40 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade iOS, iPadOS, macOS to the patched releases (iOS 18.7.10, iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8).
  • If an upgrade is not immediately possible, limit installation of applications from unofficial or untrusted sources and enforce sandboxing policies to restrict local application privileges.
  • Ensure System Integrity Protection and kernel memory protection settings are active and that no user‑space processes can alter kernel memory without proper authorization.

Generated by OpenCVE AI on August 17, 2026 at 23:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 18 Aug 2026 00:00:00 +0000

Type Values Removed Values Added
Title Kernel Memory Disclosure via Out-of-Bounds Read in macOS

Mon, 17 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to disclose kernel memory. A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to disclose kernel memory.
References

Tue, 04 Aug 2026 13:45:00 +0000

Type Values Removed Values Added
Title Kernel Memory Disclosure via Out-of-Bounds Read in macOS

Mon, 03 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Title Kernel Memory Disclosure in macOS via Memory Corruption
Weaknesses CWE-250

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Kernel Memory Disclosure in macOS via Memory Corruption
Weaknesses CWE-119
CWE-250
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 28 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to disclose kernel memory.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-17T21:30:22.775Z

Reserved: 2026-04-07T19:58:20.174Z

Link: CVE-2026-39877

cve-icon Vulnrichment

Updated: 2026-07-28T14:20:57.181Z

cve-icon NVD

Status : Modified

Published: 2026-07-27T21:16:51.640

Modified: 2026-08-17T22:17:05.307

Link: CVE-2026-39877

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T23:45:03Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer