Executive brief
A security vulnerability has been identified in Apple macOS that could allow a remote attacker to crash the system or corrupt its core memory. This issue affects macOS Sequoia, Sonoma, and Tahoe versions. If exploited, it could lead to a complete system failure or unauthorized access to sensitive system-level data. Users are advised to update to the latest versions to protect their devices.
Technical details
A buffer overflow vulnerability exists in macOS Sequoia, Sonoma, and Tahoe due to insufficient bounds checking. A remote attacker can exploit this flaw to cause unexpected system termination (denial of service) or corrupt kernel memory, potentially leading to arbitrary code execution with kernel privileges. Apple has addressed the issue by improving bounds checking in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The vulnerability is tracked as CVE-2026-64767.
Affected products
- Apple macOS Sequoia Before 15.7.8
- Apple macOS Sonoma Before 14.8.8
- Apple macOS Tahoe Before 26.6
Timeline
- 2026-07-27: disclosed
- 2026-07-27: patched