Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to cause unexpected system termination.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An out‑of‑bounds write flaw has been identified in several Apple operating systems. Although the exact payload and trigger are not detailed in the advisory, a remote attacker could exploit the vulnerability to corrupt memory and cause the system to terminate unexpectedly. The vulnerability has been addressed by adding bounds checks to the relevant code path. The impact is negative to all affected users, potentially leading to loss of availability and disruption of services.

Affected Systems

The affected products are Apple iOS, iPadOS, macOS (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6), tvOS, visionOS and watchOS. All referenced Apple platforms with the listed versions contain the vulnerability, and the patch is included in the latest major releases for each OS.

Risk and Exploitability

The advisory reports a CVSS score of 9.8 and an EPSS probability of 0.0057, yet the vulnerability is not listed in the CISA KEV catalog. Because the flaw can trigger a system crash, the potential impact is high for any device that can be reached by an attacker. No publicly available exploits are reported, but the lack of defensive controls in the vulnerable code means that exploitation could be straightforward for a skilled adversary who can deliver a crafted payload. The risk remains significant until the device firmware or operating system is updated to the fixed version.

Generated by OpenCVE AI on August 3, 2026 at 15:57 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the iOS 26.6 or iPadOS 26.6 update, and the macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6 updates.
  • Enable automatic updates on all Apple devices so that the patch is applied as soon as it is released.
  • Continuously monitor Apple’s official support pages and advisories for any additional mitigation guidance or new patches.

Generated by OpenCVE AI on August 3, 2026 at 15:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 03 Aug 2026 16:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Write Causes Remote System Termination on Apple Operating Systems

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 28 Jul 2026 01:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to cause unexpected system termination.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T13:48:30.500Z

Reserved: 2026-05-01T22:46:27.821Z

Link: CVE-2026-43803

cve-icon Vulnrichment

Updated: 2026-07-28T13:48:20.690Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:03.547

Modified: 2026-07-28T18:58:03.450

Link: CVE-2026-43803

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T16:00:07Z

Weaknesses