EUVD-2026-15043
GHSA-7gg2-3r7f-v522
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessSend maliciously crafted string over network
-
ExploitTrigger integer overflow in parser
-
ExecutionCause heap memory corruption
-
ImpactCrash application or trigger denial of service
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Integer overflow checks
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Remote unauthenticated attacker sends maliciously crafted string to vulnerable macOS systems (Sequoia <15.7.5, Sonoma <14.8.5, Tahoe <26.3). No user interaction required. Affects default configurations. |
| Impact | While CVSS and EPSS scores are not provided, the vulnerability demonstrates significant real-world risk factors. The attack vector appears to be network or local based on the string processing requirement, and the technical impact (heap corruption) is severe, suggesting confidentiality, integrity, and availability impacts. The lack of a published CVSS score and EPSS probability assessment is unusual for an Apple security update, but the provision of patch versions across three macOS releases indicates Apple treats this as a priority fix. The vulnerability is likely not in the Known Exploited Vulnerabilities (KEV) catalog, though the absence of confirmation in the intelligence data means this should be verified against current KEV data. Given the heap corruption outcome and multi-version patching, this warrants immediate remediation despite missing formal scoring metrics. |
| Exploit ScenarioDerived | An attacker could craft a malicious string input that triggers the integer overflow when processed by the vulnerable macOS string handling code. If the affected system processes input from a network source (such as through a web service, email client, or file parsing operation), the attacker could deliver the payload remotely. Upon processing, the integer overflow causes heap corruption, potentially leading to arbitrary code execution in the context of the affected process. No public proof-of-concept or active exploitation has been documented in the provided intelligence sources. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 25, 2026
Integer overflow vulnerability in Apple macOS (Sequoia 15.7.4 and earlier, Sonoma 14.8.4 and earlier, Tahoe 26.2 and earlier) allows remote attackers to trigger heap corruption by processing a specially crafted string without requiring user interaction or privileges. The vulnerability results in denial of service and potential memory corruption but currently lacks a public patch. No active exploitation has been reported.
Earlier versions of this analysis (1)
An integer overflow vulnerability in macOS allows heap corruption when processing maliciously crafted strings, potentially enabling arbitrary code execution or denial of service. Apple macOS Sequoia, Sonoma, and Tahoe are affected across multiple versions prior to their respective patch releases (15.7.5, 14.8.5, and 26.3). The vulnerability has been patched by Apple but active exploitation status and proof-of-concept availability are not documented in the provided intelligence sources.
RemediationAI
Immediately upgrade to macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, or macOS Tahoe 26.3 or later, depending on which operating system version is in use. Users should check the Apple security advisories at https://support.apple.com/en-us/126348, https://support.apple.com/en-us/126795, and https://support.apple.com/en-us/126796 for complete patch details and enable automatic security updates if not already enabled. For enterprise deployments, prioritize patching systems that process untrusted string input from network sources, and consider network-level monitoring for exploitation attempts involving malformed string data.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability involves an integer overflow in string processing logic within macOS core components, affecting Apple's macOS operating system across multiple versions as indicated by the CPE string cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*. The root cause relates to insufficient input validation during integer calculations, falling under the category of integer overflow/wraparound vulnerabilities. When a maliciously crafted string is processed, the integer overflow causes a buffer to be allocated with an incorrect size, leading to heap corruption when the undersized buffer is written to, potentially allowing memory disclosure or code execution depending on heap layout and subsequent operations.
Know when macOS gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption.
Executive ViewAI
Apple macOS versions Sequoia 15.7.4 and earlier, Sonoma 14.8.4 and earlier, and Tahoe 26.2 and earlier contain a high-severity integer overflow vulnerability that enables remote denial of service and heap corruption without user interaction. Organizations operating these macOS deployments face operational disruption risk and require immediate patching to restore system stability and prevent potential lateral movement vectors.
Apply vendor patch. Until patches are deployed: isolate affected macOS systems from untrusted networks where feasible; restrict network access to critical services; monitor system logs for unexpected crashes or memory errors; implement network segmentation to limit exposure to potential exploitation vectors.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.
Related Vulnerabilities in macOS Tahoe 26.4 Security Updates
View all 67An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility develope
Out-of-bounds write in Apple's iOS, iPadOS, and macOS file-parsing code lets remote attackers achieve arbitrary code exe
Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
A logic issue was addressed with improved restrictions. Rated high severity (CVSS 7.8), this vulnerability is no authent
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
A race condition was addressed with additional validation. Rated high severity (CVSS 7.0), this vulnerability is no auth
This issue was addressed with improved checks. Rated critical severity (CVSS 10.0), this vulnerability is remotely explo
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from
Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This i
A vulnerability was found in LibTIFF. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no aut
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. Rated high severity (CVSS 8.8), this
Exploit-DB