CVE-2026-43681: Apple macOS buffer overflow in kernel memory

Executive brief

A security vulnerability in macOS could allow a local user to read sensitive kernel memory. This affects the core operating system used on Apple computers. An attacker with existing access to the system could exploit this to bypass security protections or access restricted system information.

Technical details

A buffer overflow vulnerability exists in the macOS kernel due to insufficient bounds checking. A local attacker with standard user privileges can exploit this flaw to read sensitive information from kernel memory. The issue is resolved in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 by implementing stricter input validation. Successful exploitation could lead to the disclosure of kernel-space data, potentially aiding in further system compromise.

Affected products

• Apple macOS Sequoia < 15.7.8
• Apple macOS Sonoma < 14.8.8
• Apple macOS Tahoe < 26.6

Timeline

• 2026-07-27: disclosed
• 2026-07-27: patched

References

• https://support.apple.com/en-us/128067
• https://support.apple.com/en-us/128071
• https://support.apple.com/en-us/128072