Description
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A buffer overflow arises from inadequate size validation in the system, allowing a flaw that can be triggered by an application to cause the operating system to terminate unexpectedly. The impact is a crash of the entire system, leading to potential loss of availability and interruption of service for any user or process dependent on the operating system. This vulnerability falls under the category of buffer overflow weaknesses that can destabilize system execution flow.

Affected Systems

Apple macOS Tahoe versions older than 26.6 are affected. Any installations running these releases without the security update are susceptible.

Risk and Exploitability

Because the CVE only documents that an application may trigger the overflow to cause system termination, the specific prerequisites for exploitation are not detailed. The vulnerability is not listed in CISA’s KEV catalog, and the EPSS score is < 1%, indicating a very low exploitation probability at this time. The impact is a denial‑of‑service condition, leading to loss of availability rather than code execution or data disclosure.

Generated by OpenCVE AI on August 3, 2026 at 15:44 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install macOS Tahoe 26.6 or later to address the overflow via improved size validation.
  • Restrict the execution of non-trusted applications until the update can be applied and monitor the system for unexpected crashes.
  • Configure application sandboxing to limit the ability of malicious applications to reach the vulnerable component and reduce the chance of triggering the overflow.

Generated by OpenCVE AI on August 3, 2026 at 15:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
History

Mon, 03 Aug 2026 16:00:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in macOS Tahoe Leading to Unexpected System Termination

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 28 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T14:54:23.822Z

Reserved: 2026-07-20T18:09:01.158Z

Link: CVE-2026-64691

cve-icon Vulnrichment

Updated: 2026-07-28T14:54:17.624Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:08.797

Modified: 2026-07-28T20:01:00.563

Link: CVE-2026-64691

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T15:45:04Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')