Vulnerability details

CVE-2026-64698

Apple macOS
CVSS 3.1
9.8Critical

Official description

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory.

CVSS scores

ScoreVersionSourceVector
9.8Critical 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Apple macOS v < 14.8.8 CVEProject cvelistV5 (CNA)
Apple macOS v < 15.7.8 CVEProject cvelistV5 (CNA)
Apple macOS v < 26.6 CVEProject cvelistV5 (CNA)

References and advisories

3
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-07-27
Last updated
2026-07-28
State
Published
Assigner (CNA)
apple

Exploit prediction (EPSS)

0.58%
Probability of exploitation in 30 days
48.1%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-119
    Improper Restriction of Operations within the Bounds of a Memory Buffer