November 14, 2026

CVE Watchtower

CVE-2026-43682Apple Macos Improper Restriction of Operations within the Bounds of a Memory Buffer

NVDCVSS scored by 134c704f-9b21-4f2e-91b3-4a467353bcc0

Vulnerability Summary

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Severity Level
CRITICAL(9.8)
Published Date
Jul 27, 2026
Last Modified
Oct 24, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.72%Probability
Root Weakness (CWE)
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer β†—
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the intended boundary of the buffer.
CVSS v3.1 Base Metrics — Score 9.8 (CRITICAL)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

Affected & Patched Versions

Affected Versions
  • Apple Macos >= 14.0 and < 14.8.8
  • Apple Macos >= 15.0 and < 15.7.8
  • Apple Macos >= 26.0 and < 26.6
Patched Versions
  • Apple Macos 14.8.8
  • Apple Macos 15.7.8
  • Apple Macos 26.6

What to do

Plan remediation soon. No exploitation is confirmed yet, but the severity is critical.

  1. Check whether you run Apple Macos and which version.
  2. Update to a patched version listed above, then confirm the new version.

Timeline

  • Jul 27, 2026Published
  • Oct 24, 2026Record last modified

Score, severity and exploitation changes are tracked from the day Watchtower started logging them.

Get notified about new Apple CVEsYou are reading CVE-2026-43682. Get an email when KEV listings, exploits or new CVEs match your stack.
Notify me about Apple CVEs

Related Coverage

More Apple Macos CVEs

External References

Data last checked: Nov 14, 2026 23:13 UTC