Critical· 9.8official fix available
CVE-2026-64691
A buffer overflow in macOS Tahoe can cause the system to crash. The issue has been fixed in version 26.6.
publishedJul 27, 2026
last modifiedJul 28, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
27th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Aug 27, 2026
An official fix is available, so this entry is kept for 30 days and then removed automatically.
01
Who is affected
macOS Tahoe users, particularly those running versions older than 26.6.
02
Real-world impact
An attacker could crash the system, potentially disrupting services or causing denial of service.
03
Why this severity
The CVSS score of 9.8 reflects that the vulnerability is exploitable over the network with no authentication, and can lead to complete compromise of confidentiality, integrity, and availability.
04
What to do about it
official fix available
recommended steps
- 011. Update macOS to version 26.6 or later.
- 022. Restart the computer.
NVD-referenced vendor advisory
05
Timeline
- Jul 27, 2026 · 3d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 28, 2026 · 2d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
06
How it’s attacked
Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07
References & advisories
- support.apple.com/en-us/128067release notesvendor advisory
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →