CVE-2026-28911
A critical vulnerability (CVE-2026-28911) allows a malicious app to corrupt memory of a system process on macOS. The flaw is a memory handling issue (CWE-119). It has been fixed in macOS Sonoma 14.8.8 and macOS Tahoe 26.6.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
macOS Sonoma and macOS Tahoe users running versions older than 14.8.8 and 26.6, respectively.
Real-world impact
An attacker could corrupt memory of a system process, potentially leading to arbitrary code execution, data loss, or system instability.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited remotely with no authentication or user interaction, and it can compromise confidentiality, integrity, and availability of the system.
What to do about it
- 01Upgrade macOS to version 14.8.8 or later (Sonoma).
- 02Upgrade macOS to version 26.6 or later (Tahoe).
NVD-referenced vendor advisory
Timeline
- Jul 27, 2026 · 3d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 28, 2026 · 2d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- support.apple.com/en-us/128067vendor advisoryrelease notes
- support.apple.com/en-us/128072vendor advisoryrelease notes