What is the CVSS score of CVE-2026-64776?

CVE-2026-64776 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-64776?

Yes, a patch is available for CVE-2026-64776. Update the affected software to the latest version immediately.

macOS CVE-2026-64776

EUVD-2026-49458 MEDIUM

Out-of-bounds Read (CWE-125)

2026-07-27 apple

GHSA-pjc5-5pmf-2pq6

Buffer Overflow Information Disclosure Apple

5.5

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

vuln.today AI

5.5 MEDIUM

Official vector confirmed: local, low complexity, user interaction required, high confidentiality impact.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 28, 2026 - 16:40 vuln.today

CVSS changed

Jul 28, 2026 - 16:22 NVD

5.5 (MEDIUM)

Patch available

Jul 27, 2026 - 21:17 EUVD

CVE Published

Jul 27, 2026 - 20:14 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 27, 2026 - 20:14 cve.org

MEDIUM 5.5

DescriptionCVE.org

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.

AnalysisAI

Kernel memory disclosure in Apple macOS allows a rogue application to read sensitive kernel data via an out-of-bounds read. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. No public exploit identified and EPSS score is low (0.15%), indicating low exploitation risk in the wild.

Technical ContextAI

The vulnerability is an out-of-bounds read (CWE-125) in the macOS kernel, caused by insufficient bounds checking on memory operations. An app can read kernel memory, which contains sensitive information such as cryptographic keys, process credentials, or internal kernel structures. Affected versions include macOS Sequoia <15.7.8, macOS Sonoma <14.8.8, and macOS Tahoe <26.6, per the provided CPE and EUVD data.

RemediationAI

Upgrade to the latest patched versions: macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6. No workarounds are available; the only remediation is applying the vendor-supplied updates. Apply patches via System Update or directly from Apple's support pages linked above.