What is the CVSS score of CVE-2026-43768?

CVE-2026-43768 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-43768?

Yes, a patch is available for CVE-2026-43768. Update the affected software to the latest version immediately.

macOS CVE-2026-43768

EUVD-2026-49505 MEDIUM

Uncontrolled Resource Consumption (CWE-400)

2026-07-27 apple

GHSA-5x38-79xh-f5w2

Denial Of Service Apple

5.5

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

vuln.today AI

5.5 MEDIUM

Local access, low complexity, no privileges, user interaction required, high availability impact only.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:R/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 19:33 vuln.today

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:13 cve.org

MEDIUM 5.5

CVE Published

Jul 27, 2026 - 20:13 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

AnalysisAI

Local denial of service in macOS allows a malicious app to trigger unexpected system termination via memory exhaustion. Affects macOS Sequoia prior to 15.7.8, macOS Sonoma prior to 14.8.8, and macOS Tahoe prior to 26.6. No active exploitation or public exploit identified; EPSS probability is low (0.16%).

Technical ContextAI

The vulnerability resides in macOS kernel memory management, classified as CWE-400 (Uncontrolled Resource Consumption). A local application can exhaust system memory resources, causing a kernel panic or forced system restart. The affected components are the macOS kernel's memory handling routines, which fail to properly bounds-check resource allocation when invoked by a user-level app. CPE data confirms all macOS versions are potentially affected, with patched versions indicated for the three main release lines.

RemediationAI

Update to the latest patched versions: macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6 as appropriate. No vendor-released workarounds are documented. Ensure systems are configured to install updates promptly via Software Update or MDM solutions. If patching is delayed, limit user installation of unverified applications through application control or sandboxing tools, though this only reduces the attack surface and does not eliminate the vulnerability.