Buffer Overflow Vulnerability in macOS Sequoia and Sonoma by Apple
CVE-2026-64705

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Vendor
CVE Published:
25 August 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-64705?

A buffer overflow vulnerability in macOS Sequoia and Sonoma can lead to potential unexpected system termination or unauthorized memory access. This issue was addressed with improved bounds checking in the software. Users are encouraged to update their systems to the latest versions to mitigate risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 26.6

macOS 0 < 14.8.7

macOS 0 < 15.7.7

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-64705
Created by eddinos2

References

https://support.apple.com/en-us/127116
https://support.apple.com/en-us/127117
https://support.apple.com/en-us/128066

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.