Out-of-Bounds Read in macOS by Apple
CVE-2026-43809

9.8CRITICAL

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Vendor
CVE Published:
27 July 2026

What is CVE-2026-43809?

An out-of-bounds read vulnerability has been identified in Apple's macOS, which could allow malicious applications to exploit this weakness, potentially leading to unexpected system behavior or termination. This vulnerability has been mitigated through enhanced bounds checking in the latest versions of macOS, specifically Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.

Affected Version(s)

iOS and iPadOS 0 < 18.7.10

macOS 0 < 14.8.8

macOS 0 < 15.7.8

References

https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128071
https://support.apple.com/en-us/128072

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.