CVE-2026-64767
published 2026-07-27CVE-2026-64767: A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote…
PriorityP351critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.78%
55.4th percentile
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 14.8.8 | 14.8.8 |
| apple | macos | < 15.7.8 | 15.7.8 |
| apple | macos | < 26.6 | 26.6 |
| apple | macos | >= 14.0 < 14.8.8 | 14.8.8 |
| apple | macos | >= 15.0 < 15.7.8 | 15.7.8 |
| apple | macos | >= 26.0 < 26.6 | 26.6 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple macOS up to 14.8.7/15.7.7/26.5 buffer overflow
vuldb·2026-07-28
CVE-2026-64767 Apple macOS up to 14.8.7/15.7.7/26.5 buffer overflow
A vulnerability was found in Apple macOS up to 14.8.7/15.7.7/26.5 and classified as very critical. Affected by this issue is some unknown functionality. Executing a manipulation can lead to buffer overflow.
This vulnerability appears as CVE-2026-64767. The attack may be performed from remote. There is no available exploit.
It is suggested to upgrade the affected component.
GHSA
A buffer overflow was addressed with improved bounds checking.
ghsa_unreviewed·2026-07-27
CVE-2026-64767 [CRITICAL] CWE-120 A buffer overflow was addressed with improved bounds checking.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
No detection rules found.
No public exploits indexed.
2026-07-27
Published