What is the CVSS score of CVE-2026-43771?

CVE-2026-43771 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of Apple are affected by CVE-2026-43771?

Denial-of-service. A patch is available.

Is there a patch available for CVE-2026-43771?

Yes, a patch is available for CVE-2026-43771. Update the affected software to the latest version immediately.

Apple CVE-2026-43771

EUVD-2026-49424 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-07-27 apple

GHSA-547x-mggw-3f5m

Buffer Overflow Apple Stack Overflow

7.1

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

7.1 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 14:39 vuln.today

CVSS changed

Jul 28, 2026 - 14:37 NVD

7.1 (HIGH)

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:14 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 27, 2026 - 20:14 cve.org

HIGH 7.1

DescriptionCVE.org

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.