Description
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
Published: 2026-07-27
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability arises from flaws in memory handling that can enable a malicious or buggy application to cause the operating system to terminate unexpectedly, effectively disrupting service availability. This forms a classic denial‑of‑service scenario where a process can crash the system, potentially affecting user sessions and data integrity.

Affected Systems

Apple macOS, including Sequoia, Sonoma and Tahoe versions prior to 15.7.8, 14.8.8 and 26.6 respectively, are affected. The patch versions contain improved memory handling that resolves the issue. Based on the description, it is inferred that earlier macOS versions prior to those patches are vulnerable.

Risk and Exploitability

The CVSS score of 5.5 indicates a medium severity vulnerability. The EPSS score is less than 1%, meaning the estimated probability of exploitation is very low. The vulnerability is not listed in the CISA KEV catalog, suggesting no known active exploitation. The flaw can be triggered by any application running on affected macOS releases, implying local exploitation potential. As the weakness stems from memory handling, a malicious or buggy app can cause unexpected system termination, leading to a denial‑of‑service condition.

Generated by OpenCVE AI on August 4, 2026 at 13:31 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest macOS patch (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6) to address the memory handling issue.
  • Until the patch is applied, restrict execution of untrusted or newly installed applications that may trigger memory corruption.
  • Regularly review system crash logs for unexpected terminations and ensure that all applications are updated with the latest security patches.

Generated by OpenCVE AI on August 4, 2026 at 13:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 14:00:00 +0000

Type Values Removed Values Added
Title macOS Application Crash Vulnerability via Improper Memory Handling

Mon, 03 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
Title Memory Corruption Vulnerability Allowing Unexpected System Termination in macOS
Weaknesses CWE-119

Thu, 30 Jul 2026 01:30:00 +0000

Type Values Removed Values Added
Title Memory Corruption Vulnerability Allowing Unexpected System Termination in macOS
Weaknesses CWE-119

Tue, 28 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 28 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T17:55:43.809Z

Reserved: 2026-05-01T22:46:27.817Z

Link: CVE-2026-43768

cve-icon Vulnrichment

Updated: 2026-07-28T17:49:11.401Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:01.173

Modified: 2026-07-29T19:33:13.310

Link: CVE-2026-43768

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T13:45:03Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption