Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an out-of-bounds read in macOS that can cause a system crash. An application that triggers this read can lead to an unexpected termination of the operating system, resulting in a denial of service for that machine. The flaw is a classic out-of-bounds read problem identified as CWE-125.

Affected Systems

Apple's macOS operating system is affected, specifically any release before macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Users on earlier versions of these branches may be impacted by the issue.

Risk and Exploitability

The CVSS score of 9.8 classifies the flaw as critical, yet the EPSS score of less than 1% indicates a very low probability that an attacker will successfully exploit it. It is not listed in CISA's KEV catalog. The attack vector is likely local, involving an application that can trigger the out-of-bounds read; however, if the vulnerable code is reachable from the network, remote exploitation is conceivable. The consequence is a crash of the OS, completely interrupting availability on the affected host.

Generated by OpenCVE AI on August 3, 2026 at 15:46 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade macOS to the latest security update: macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6 or later.
  • Restrict execution of applications that could trigger the out-of-bounds read by enforcing sandboxing or limiting app permissions.
  • Monitor system logs for abnormal termination events and configure automated restarts, but treat this only as a temporary mitigation.

Generated by OpenCVE AI on August 3, 2026 at 15:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 03 Aug 2026 16:15:00 +0000

Type Values Removed Values Added
Title macOS Out-of-Bounds Read Leading to Unexpected System Termination

Thu, 30 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
Title macOS Out-of-Bounds Read Leading to Unexpected System Termination

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 28 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T15:03:31.388Z

Reserved: 2026-05-01T22:46:27.821Z

Link: CVE-2026-43809

cve-icon Vulnrichment

Updated: 2026-07-28T15:03:25.599Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:04.043

Modified: 2026-07-28T17:58:42.090

Link: CVE-2026-43809

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T16:00:07Z

Weaknesses