Critical· 9.8official fix available
CVE-2026-43748
A flaw in how the system handles memory allows an application to write data outside of its intended boundaries. This error can lead to unexpected system crashes or shutdowns.
publishedJul 27, 2026
last modifiedJul 28, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
28th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Aug 27, 2026
An official fix is available, so this entry is kept for 30 days and then removed automatically.
01
Who is affected
Users running macOS Sequoia or macOS Tahoe versions prior to the specified fixes.
02
Real-world impact
An attacker could potentially cause a system to crash or terminate unexpectedly by exploiting this memory error.
03
Why this severity
This is a critical vulnerability because it can be exploited remotely over a network without requiring any user interaction or special privileges, potentially leading to a total loss of system availability.
04
What to do about it
official fix available
recommended steps
- 01Upgrade to macOS Sequoia 15.7.8 or later.
- 02Upgrade to macOS Tahoe 26.6 or later.
NVD-referenced vendor advisory
05
Timeline
- Jul 27, 2026 · 3d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 28, 2026 · 2d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
06
How it’s attacked
Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07
References & advisories
- support.apple.com/en-us/128067release notesvendor advisory
- support.apple.com/en-us/128071release notesvendor advisory
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →