CVE-2026-43764: Apple macOS integer overflow system termination

Executive brief

An integer overflow vulnerability in macOS could allow a malicious application to cause an unexpected system shutdown. This affects users of macOS Sequoia, Sonoma, and Tahoe. Exploitation of this flaw primarily impacts system availability, potentially leading to data loss from unsaved work or disruption of business operations.

Technical details

An integer overflow vulnerability exists in macOS Sequoia, Sonoma, and Tahoe. The issue was addressed through improved input validation to prevent improper memory or arithmetic operations. A local malicious application can exploit this vulnerability to trigger an unexpected system termination (denial of service). The vulnerability is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products

• Apple macOS Sequoia Before 15.7.8
• Apple macOS Sonoma Before 14.8.8
• Apple macOS Tahoe Before 26.6

Timeline

• 2026-07-27: advisory
• 2026-07-27: disclosed
• 2026-07-27: patched

References

• https://support.apple.com/en-us/128067
• https://support.apple.com/en-us/128071
• https://support.apple.com/en-us/128072