What is the CVSS score of CVE-2026-64704?

CVE-2026-64704 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-64704?

Yes, a patch is available for CVE-2026-64704. Update the affected software to the latest version immediately.

macOS CVE-2026-64704

EUVD-2026-49498 CRITICAL

Access of Resource Using Incompatible Type (Type Confusion) (CWE-843)

2026-07-27 apple

GHSA-m868-q9qr-wvmh

Information Disclosure Memory Corruption Apple

9.8

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

6.2 MEDIUM

Local app execution (AV:L) without privileges (PR:N) causes system termination (A:H) with no C/I impact.

3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 16:27 vuln.today

CVSS changed

Jul 28, 2026 - 16:22 NVD

9.8 (CRITICAL)

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:12 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 27, 2026 - 20:12 cve.org

CRITICAL 9.8

DescriptionCVE.org

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

AnalysisAI

A type confusion vulnerability in macOS allows an application to cause unexpected system termination (denial of service). Affected versions include macOS Sequoia, Sonoma, and Tahoe prior to the fixed releases; the issue has been patched by Apple. No public exploit is known, and EPSS indicates very low exploitation probability, with no active exploitation reported.

Technical ContextAI

This is a type confusion (CWE-843) vulnerability in macOS memory handling. It occurs when the operating system misinterprets the type of a memory object, leading to corruption that can crash the system. The affected product, as identified by CPE cpe:2.3:a:apple:macos, spans multiple macOS versions, and the root cause lies in the core memory management routines.

RemediationAI

Upgrade to macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6, as appropriate. No alternative mitigations are documented; applying the vendor patch is the only remediation.