Description
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
Published: 2026-10-20
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

A buffer overflow vulnerability was identified in memory handling within macOS, where an application may trigger an unexpected system termination by causing a size validation overflow during a memory write. The flaw does not lead to direct code execution or data theft; its primary effect is service disruption by forcing a crash. The weakness corresponds to improper bounds checking, classified as CWE‑119.

Affected Systems

Apple macOS versions prior to Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 are affected; the patch was incorporated in those releases.

Risk and Exploitability

The CVSS score is 5.5 and the EPSS score is below 1 %. The vulnerability is not listed in CISA KEV, indicating no known public exploitation. The most probable attack vector is local, requiring a malicious application or a compromised user to trigger the overflow. Systems still running legacy macOS releases remain at risk for accidental or intentional crashes.

Generated by OpenCVE AI on October 20, 2026 at 18:55 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade macOS to Golden Gate 27, Sequoia 15.8, Tahoe 26.7, or newer releases that include the buffer overflow fix
  • Ensure all installed applications come from trusted sources and have not been tampered to trigger overflow behaviour
  • If an immediate upgrade is not feasible, disable or uninstall applications that could exploit the overflow and monitor the system for crashes

Generated by OpenCVE AI on October 20, 2026 at 18:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 03 Nov 2026 21:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Tue, 20 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Title Buffer Overflow Causes Unexpected System Termination in macOS

Tue, 20 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 20 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow Causes Unexpected System Termination in macOS
Weaknesses CWE-119

Tue, 20 Oct 2026 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Tue, 20 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
Description A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-10-26T20:36:25.808Z

Reserved: 2026-07-22T00:46:56.739Z

Link: CVE-2026-65396

cve-icon Vulnrichment

Updated: 2026-10-20T14:09:03.854Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-20T01:17:18.313

Modified: 2026-11-03T21:15:21.490

Link: CVE-2026-65396

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T19:00:16Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer