Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A type confusion error in memory handling was identified in Apple's macOS and tvOS platforms, allowing an application to induce an unexpected system termination. The flaw permits an attacker to cause a crash that could be leveraged to disrupt services or user experience. The weakness aligns with improper type checking that can lead to fatal memory corruption.

Affected Systems

Apple macOS and tvOS devices running any version prior to 26.6 are vulnerable. The issue was addressed and fixed in Apple OS release 26.6 for both operating systems. No other affected versions are documented at this time.

Risk and Exploitability

The vulnerability is a high‑impact denial‑of‑service flaw; its exploitation would require the ability to run or trigger an application susceptible to the type confusion. The EPSS score is < 1%, and it is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation. Nevertheless, the potential for application‑initiated crashes warrants prompt remediation. The attack vector is inferred to be local or remote if an application can be executed with sufficient privileges, given that the flaw operates within the app's memory space.

Generated by OpenCVE AI on August 13, 2026 at 10:52 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest macOS and tvOS update (26.6 or later).
  • Audit or replace third‑party apps that may rely on type confusion; implement strict type checking as recommended for CWE‑843, ensuring all data types are validated before use.
  • Enable automatic system updates and monitor crash logs to quickly detect and isolate any unexpected system terminations.

Generated by OpenCVE AI on August 13, 2026 at 10:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 13 Aug 2026 11:15:00 +0000

Type Values Removed Values Added
Title Type Confusion Vulnerability in Apple macOS and tvOS Leading to Unexpected System Termination

Wed, 12 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Title Type Confusion Leading to Unexpected System Termination in macOS and tvOS
Weaknesses CWE-120
CWE-416
CWE-785

Wed, 05 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Title Type Confusion Leading to Unexpected System Termination in macOS and tvOS
Weaknesses CWE-120
CWE-416
CWE-785

Mon, 03 Aug 2026 16:15:00 +0000

Type Values Removed Values Added
Title Unexpected System Termination via Type Confusion in macOS and tvOS
Weaknesses CWE-242
CWE-476

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Unexpected System Termination via Type Confusion in macOS and tvOS
Weaknesses CWE-242
CWE-476

Tue, 28 Jul 2026 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Apple tvos
Vendors & Products Apple
Apple macos
Apple tvos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T18:50:21.318Z

Reserved: 2026-07-20T18:09:47.192Z

Link: CVE-2026-64727

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:11.640

Modified: 2026-07-29T19:54:12.453

Link: CVE-2026-64727

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T11:00:12Z

Weaknesses
  • CWE-843

    Access of Resource Using Incompatible Type ('Type Confusion')