Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

CVE-2026-64695: macOS: Remote User Can Crash System or Damage Kernel

CVE-2026-64695 · published 3 months ago
Summary

A vulnerability in macOS allows a remote user to potentially crash your system or damage its core components. This is a concern for businesses that rely on their Macs for critical operations. To protect your system, ensure you're running the latest version of macOS, which is macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6.

What to do
  • Update apple ios and ipados to version 18.7.10 or later.
Affected software
VendorProductAffected versions
apple macos < 14.8.8
>= 14.0, < 14.8.8
>= 15.0, < 15.7.8
>= 26.0, < 26.6
apple ios and ipados < 18.7.10
Original advisory text
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able ...
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published27 Jul 2026
Updated4 Nov 2026
First seen27 Jul 2026
Sources
CVE-2026-64695 · MITRE
Track software like this
Free during beta