What is the CVSS score of CVE-2026-43681?

CVE-2026-43681 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-43681?

Yes, a patch is available for CVE-2026-43681. Update the affected software to the latest version immediately.

Apple CVE-2026-43681

EUVD-2026-49555 HIGH

Classic Buffer Overflow (CWE-120)

2026-07-27 apple

GHSA-8gv4-rrq2-vm98

Buffer Overflow Apple

7.1

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 15:36 vuln.today

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:13 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 27, 2026 - 20:13 cve.org

HIGH 7.1

DescriptionCVE.org

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read kernel memory.

AnalysisAI

Local kernel memory read in macOS via a buffer overflow, fixed in macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. A local user with low privileges can trigger the overflow to read sensitive kernel data, potentially leaking encryption keys or credentials. No active exploitation or public exploit code is known.