CVE-2026-28911

Published: Jul 27, 2026Modified: Oct 24, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.

Affected (2)

Products: Apple: Macos

Apple

1 product

Macos

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	14.0 ≤ version < 14.8.8
Apple Macos	26.0 ≤ version < 26.6

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

https://support.apple.com/en-us/128067

Source: product-security@apple.com

Vendor AdvisoryRelease Notes

https://support.apple.com/en-us/128072

Source: product-security@apple.com

Vendor AdvisoryRelease Notes

Timeline

No history available yet.