Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An out‑of‑bounds write vulnerability in macOS allows an application to write beyond the limits of a memory buffer, potentially corrupting internal state and triggering unexpected system termination. The flaw is rooted in insufficient bounds checking, and the resulting crash can serve as a denial‑of‑service to the operating system.

Affected Systems

Apple macOS is affected. Versions prior to macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 contain the flaw. Users running earlier releases are impacted.; the references supplied list the patches that address this issue.

Risk and Exploitability

The CVSS score of 9.8 indicates a high severity rating. Based on the EPSS score of less than 1%, the likelihood of exploitation is inferred to be very low. Because the vulnerability is not listed in the CISA KEV catalog, it is inferred that no widespread exploits have been observed. Based on the description, it is inferred that an attacker would need access to a vulnerable application to overflow memory, which typically denotes a local or compromised application scenario. Overall, the risk is relatively low in terms of exploitability, yet the potential impact of a system crash warrants timely remediation.

Generated by OpenCVE AI on August 3, 2026 at 16:00 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to the latest supported macOS release: macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6
  • Apply Gatekeeper and configuration profiles to restrict execution of untrusted applications
  • Monitor system logs and crash reports for abnormal termination events that may indicate exploitation

Generated by OpenCVE AI on August 3, 2026 at 16:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 03 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in macOS Leading to System Termination

Thu, 30 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write in macOS Leading to System Termination

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 28 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T14:03:05.282Z

Reserved: 2026-05-01T22:46:27.820Z

Link: CVE-2026-43802

cve-icon Vulnrichment

Updated: 2026-07-28T14:02:52.118Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:03.450

Modified: 2026-07-28T17:58:49.233

Link: CVE-2026-43802

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T16:15:03Z

Weaknesses