Skip to main content

Apple CVE-2026-28911

| EUVDEUVD-2026-49426 CRITICAL
Buffer Overflow (CWE-119)
2026-07-27 apple GHSA-3628-553v-4wcf
9.8
CVSS 3.1 · Vendor: apple
Share

Severity by source

Vendor (apple) PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 28, 2026 - 18:33 vuln.today
CVSS changed
Jul 28, 2026 - 16:22 NVD
9.8 (CRITICAL)
Patch available
Jul 27, 2026 - 21:17 EUVD
CVE Published
Jul 27, 2026 - 20:14 cve.org
CRITICAL 9.8
CVE Published
Jul 27, 2026 - 20:14 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.

AnalysisAI

Memory corruption in macOS may allow a malicious app to corrupt the memory of a system process, potentially leading to arbitrary code execution. This issue is fixed in macOS Sonoma 14.8.8 and macOS Tah

Share

CVE-2026-28911 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy