EUVD-2026-49611
GHSA-8wwr-xrm9-39j9
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Network-reachable kernel memory corruption with no stated privileges or interaction (AV:N/AC:L/PR:N/UI:N); kernel-context corruption supports C/I/A:H, though C:H is somewhat uncertain versus a pure DoS.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
5DescriptionCVE.org
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
AnalysisAI
Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS/visionOS/watchOS 26.6) allows a remote user to trigger unexpected system termination (denial of service) or corrupt kernel memory, potentially leading to arbitrary code execution in kernel context. Apple addressed the flaw with improved memory handling and credited its own security team. There is no public exploit identified at time of analysis and EPSS probability is low (0.25%), but the CVSS 9.8 rating and CISA SSVC 'total' technical-impact assessment mark it as a high-severity kernel bug.
Technical ContextAI
The vulnerability affects Apple's XNU kernel, the common core shared across all of Apple's platforms, which is why a single CVE spans iOS/iPadOS, macOS, tvOS, visionOS and watchOS. The root cause is classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), and the 'Buffer Overflow' tag plus Apple's fix description ('improved memory handling') indicate a bounds-checking or buffer-management error in kernel-level parsing or handling of remotely supplied data. Corruption of kernel memory is the most security-critical class of memory bug because the kernel runs with full privilege and no sandbox, so a controllable overflow can escalate from a crash to full kernel compromise. The affected CPEs are apple:ios_and_ipados, apple:macos, apple:tvos, apple:visionos and apple:watchos, all versions prior to the fixed builds.
RemediationAI
Vendor-released patch: update to iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, or watchOS 26.6, as documented in Apple's advisories at https://support.apple.com/en-us/128066 through https://support.apple.com/en-us/128072. Because the flaw is in the kernel there is no meaningful in-OS configuration workaround; if immediate patching is impossible, the practical compensating controls are to restrict network exposure of the affected devices (limit them to trusted networks, block untrusted inbound connections at the network perimeter, and disable or restrict any remote-facing services that reach kernel handling of untrusted input), accepting the trade-off of reduced connectivity and functionality until the update is applied. Prioritize patching internet-exposed and shared macOS hosts first.
More in Ios And Ipados
View allLocal privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability,
Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause
Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be trigg
Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, ma
Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected a
We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sou
Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an
Denial of service via unexpected app termination affects multiple Apple operating systems, including iOS, iPadOS, macOS,
A data protection flaw in multiple Apple operating systems allows a locally-installed app to fingerprint the user. An at
Denial-of-service (unexpected system termination) affects Apple's shared OS platforms - iOS/iPadOS before 26.6, macOS Se
Local denial-of-service in Apple operating systems via a use-after-free vulnerability allows an app to cause unexpected
We need to output a JSON object with the specified fields, synthesizing from the provided CVE data. The input includes:
Same weakness CWE-119 – Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today