Description
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability in macOS results from improper memory handling that can allow a local application to read sensitive kernel memory or cause the system to terminate unexpectedly. This flaw may expose privileged data stored in memory and lead to a denial of service if the operating system crashes. The issue is a buffer overrun (CWE-119).

Affected Systems

Apple macOS versions earlier than macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 are affected. The issue is fixed in those newer builds, which incorporate improved memory handling.

Risk and Exploitability

Based on the description, the flaw appears to require local execution; an attacker must run code within a sandboxed or privileged process to trigger the memory issue. An EPSS score of < 1% indicates a low probability of exploitation, and the vulnerability is not listed in CISA KEV. Because the description indicates a local trigger and no publicly documented exploits, the risk is considered significant, but the lack of exploitation evidence suggests moderate likelihood. Nonetheless, the potential impact includes kernel‑memory disclosure and system crash, warranting immediate remediation.

Generated by OpenCVE AI on August 4, 2026 at 23:53 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the macOS updates to Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6, which fix the buffer overflow (CWE-119) and prevent information disclosure.
  • Limit execution of local applications to trusted sources and, where possible, use macOS sandboxing features to contain potential kernel memory access.
  • Avoid running untrusted or suspicious applications until the update is installed, and monitor Apple support channels for further guidance.

Generated by OpenCVE AI on August 4, 2026 at 23:53 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Title Improper Memory Handling in macOS Enables Kernel Memory Disclosure and System Crash

Mon, 03 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
Title Kernel Memory Access and Crash via Improper Memory Handling
Weaknesses CWE-200

Thu, 30 Jul 2026 01:30:00 +0000

Type Values Removed Values Added
Title Kernel Memory Access and Crash via Improper Memory Handling
Weaknesses CWE-200

Tue, 28 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 28 Jul 2026 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T16:11:25.974Z

Reserved: 2026-07-20T18:09:01.158Z

Link: CVE-2026-64698

cve-icon Vulnrichment

Updated: 2026-07-28T16:11:18.310Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:09.490

Modified: 2026-07-30T14:35:12.950

Link: CVE-2026-64698

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-05T00:00:03Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer