Description
A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service.
Published: 2026-07-27
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A local attacker may be able to cause a denial of service on macOS. The vulnerability may cause the operating system or a component to become unavailable, disrupting normal user activity and availability.

Affected Systems

Apple macOS releases prior to 26.6 are affected. The issue was addressed in macOS Tahoe 26.6; all versions earlier than 26.6 contain the vulnerable code and are susceptible to exploitation.

Risk and Exploitability

The EPSS score is less than 1% and the vulnerability is not listed in KEV, indicating no widely observed exploitation. The description does not specify that local code execution is required; it only states that a local attacker may be able to cause a denial of service. Remote attackers are not impacted. The practical risk aligns with a medium severity based on the CVSS score of 5.5, pending an update the vulnerability could still disrupt system availability.

Generated by OpenCVE AI on August 4, 2026 at 13:45 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade macOS to version 26.6 or later to remove the vulnerable code.
  • Restrict local user privileges to limit the ability to execute arbitrary code on the system.
  • If an upgrade is not immediately possible, disable or quarantine the component or feature that contains the vulnerable logic to prevent execution.

Generated by OpenCVE AI on August 4, 2026 at 13:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://support.apple.com/en-us/128067 cve-icon cve-icon
History

Tue, 04 Aug 2026 14:15:00 +0000

Type Values Removed Values Added
Title macOS Local Denial of Service Vulnerability Fixed in 26.6

Thu, 30 Jul 2026 01:30:00 +0000

Type Values Removed Values Added
Title macOS Local Denial of Service Vulnerability Fixed in 26.6

Tue, 28 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 28 Jul 2026 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T16:31:35.587Z

Reserved: 2026-05-01T22:46:27.821Z

Link: CVE-2026-43806

cve-icon Vulnrichment

Updated: 2026-07-28T16:07:52.047Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:03.850

Modified: 2026-07-30T14:35:23.660

Link: CVE-2026-43806

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T14:00:03Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption