CVE-2026-43767: Apple macOS denial of service via improper memory handling

Executive brief

A memory handling issue in macOS could allow a malicious application to cause an unexpected system shutdown. This affects users of macOS Sequoia, Sonoma, and Tahoe. While the primary impact is a disruption of service (denial of service), it requires a malicious app to be running on the device.

Technical details

A vulnerability exists in macOS Sequoia, Sonoma, and Tahoe due to improper memory handling. A local attacker can exploit this by running a specially crafted application, leading to unexpected system termination (Denial of Service). The issue was addressed by Apple through improved memory management logic. Patches are available in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Affected products

• Apple macOS Sequoia before 15.7.8
• Apple macOS Sonoma before 14.8.8
• Apple macOS Tahoe before 26.6

Timeline

• 2026-07-27: advisory
• 2026-07-27: patched

References

• https://support.apple.com/en-us/128067
• https://support.apple.com/en-us/128071
• https://support.apple.com/en-us/128072