Description
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause a denial of service.
Published: 2026-09-14
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch Now
AI Analysis

Impact

An integer overflow in macOS can cause a denial of service by crashing a system component. The flaw occurs when numeric input is not adequately validated, allowing an overflow that disrupts normal operation. The CVE statement indicates that the issue was fixed with improved input validation, implying that the impact is limited to availability and that the description does not mention code execution or privilege escalation. It is inferred that the vulnerability does not enable code execution.

Affected Systems

Apple macOS releases Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 are affected. No other vendors or products are noted in the CNA data. The vulnerability applies to any component of the operating system that processes the vulnerable numeric input on these versions.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity. The EPSS score of less than 1% signals a low likelihood of active exploitation, and the vulnerability is not included in the CISA KEV catalog. Attackers would need to supply crafted input to trigger the overflow, so the likely attack vector is inferred to be local or user‑controlled. Because the flaw is limited to denial of service, the risk is manageable but repeated crashes could degrade system availability.

Generated by OpenCVE AI on September 20, 2026 at 18:14 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the macOS update that contains the fix (Golden Gate 27, Sequoia 15.8, or Tahoe 26.7).
  • Reboot the device to ensure the patched components are loaded.
  • If the system uses third‑party applications that might process the vulnerable input, update those applications or restrict their usage until the OS patch is applied.

Generated by OpenCVE AI on September 20, 2026 at 18:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title Integer Overflow Causing Denial of Service in macOS

Wed, 16 Sep 2026 15:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Wed, 16 Sep 2026 09:15:00 +0000

Type Values Removed Values Added
Title Integer Overflow Allows Denial of Service in macOS
Weaknesses CWE-680

Tue, 15 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-190
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 15 Sep 2026 09:30:00 +0000

Type Values Removed Values Added
Title Integer Overflow Allows Denial of Service in macOS
Weaknesses CWE-680

Tue, 15 Sep 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause a denial of service.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-15T18:07:37.320Z

Reserved: 2026-07-22T00:47:18.621Z

Link: CVE-2026-65413

cve-icon Vulnrichment

Updated: 2026-09-15T18:07:06.374Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-14T21:17:24.950

Modified: 2026-09-16T14:48:21.590

Link: CVE-2026-65413

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T18:15:17Z

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound