CVE-2026-43802
A critical vulnerability in macOS allows an attacker to write data outside the intended memory bounds, potentially causing the system to crash. The flaw has been fixed in recent releases of macOS Sequoia, Sonoma, and Tahoe.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
macOS Sequoia 15.7.8 or later, macOS Sonoma 14.8.8 or later, macOS Tahoe 26.6 or later. Typical users are Mac computer owners running these operating systems.
Real-world impact
An attacker who can exploit this flaw could force the operating system to terminate unexpectedly, leading to denial of service and possible data loss.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability is exploitable over the network with no authentication or user interaction, and it can completely compromise confidentiality, integrity, and availability of the system.
What to do about it
- 011. Update your macOS to version Sequoia 15.7.8 or later, Sonoma 14.8.8 or later, or Tahoe 26.6 or later.
- 022. Restart your computer to apply the update.
NVD-referenced vendor advisory
Timeline
- Jul 27, 2026 · 3d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 28, 2026 · 2d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- support.apple.com/en-us/128067release notesvendor advisory
- support.apple.com/en-us/128071release notesvendor advisory
- support.apple.com/en-us/128072release notesvendor advisory