# CVE-2026-65374: Apple macOS WebDAV memory corruption remote code execution

Source: https://junglewise.ai/threats/cve-2026-65374-apple-macos-webdav-memory-corruption-remote-code-execution  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-14. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-65374 · Severity: high · CVSS 8.8 · Published 2026-09-14

macOS includes file-sharing protocols like WebDAV that allow users to connect to remote servers for collaborative work and file access. An attacker operating a malicious WebDAV server can exploit a memory corruption flaw to execute arbitrary code on a victim's computer with no user interaction beyond the normal connection action. This could lead to complete system compromise including data theft, malware installation, and lateral movement within corporate networks.

Technologies: [Apple macOS Golden Gate](https://junglewise.ai/threats/technologies/macos-golden-gate), [Apple macOS Sequoia](https://junglewise.ai/threats/technologies/macos). Vendors: [Apple](https://junglewise.ai/threats/vendors/apple).

## Quick answers

**Is CVE-2026-65374 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-65374 being exploited in the wild.

**How severe is CVE-2026-65374?** High severity, with a CVSS score of 8.8, published 14 September 2026.

**Which products and versions are affected?** Apple macOS Golden Gate before 27; Apple macOS Sequoia before 15.8; Apple macOS Tahoe before 26.7.

**Is there a fix for CVE-2026-65374?** A patch was published on 2026-09-14: Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-65374 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-65374?** Check whether you run Apple macOS Golden Gate, Apple macOS Sequoia or Apple macOS Tahoe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a memory corruption issue in macOS's WebDAV client implementation, addressable through improved validation of untrusted server responses. The attack vector is network-based: a user or automated process connecting to a malicious WebDAV server can be exploited without requiring any special privileges or user interaction beyond initiating the connection. An attacker can achieve arbitrary code execution in the context of the connecting process or user. The flaw has been patched in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7; users should apply these updates immediately.

## Affected products

- Apple macOS Golden Gate before 27
- Apple macOS Sequoia before 15.8
- Apple macOS Tahoe before 26.7

## Timeline

- 2026-09-14: disclosed: Published in NVD
- 2026-09-14: patched: Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7

## References

- [https://support.apple.com/en-us/149035](https://support.apple.com/en-us/149035)
- [https://support.apple.com/en-us/149042](https://support.apple.com/en-us/149042)

## Related threats

- [Apple iOS and iPadOS Bluetooth pairing rate limit bypass in CoreUtils](https://junglewise.ai/threats/cve-2026-113964-a-logic-issue-was-addressed-with-improved-state-management-this)
- [Apple Messages authorization bypass in iMessage group chat](https://junglewise.ai/threats/cve-2026-113961-an-authorization-issue-was-addressed-with-improved-validation)
- [Apple Messages message history disclosure in group chats](https://junglewise.ai/threats/cve-2026-113960-this-issue-was-addressed-by-removing-the-vulnerable-code-this)
- [Apple AppleAVD out-of-bounds write in video processing](https://junglewise.ai/threats/cve-2026-86992-the-issue-was-addressed-with-improved-memory-handling-this-issue)
- [Apple CoreMedia access issue in camera permission bypass](https://junglewise.ai/threats/cve-2026-86990-an-access-issue-was-addressed-with-improved-access-restrictions)