CVE-2026-43771

Analyzed Analyzed - Analysis Complete

Stack Overflow in macOS Leading to DoS

Publication date: 2026-07-27

Last updated on: 2026-10-24

Assigner: Apple Inc.

Description

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-10-24

Generated

2026-11-08

AI Q&A

2026-07-28

EPSS Evaluated

2026-11-07

NVD

CVE-2026-43771

EUVD

EUVD-2026-49424

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 14.0 (inc) to 14.8.8 (exc)
apple	macos	From 15.0 (inc) to 15.7.8 (exc)
apple	macos	From 26.0 (inc) to 26.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack overflow vulnerability caused by insufficient input validation. An application could trigger this flaw to cause a denial-of-service by crashing the system or application.

Detection Guidance

This vulnerability is specific to Apple macOS versions and involves a stack overflow issue. Detection requires checking your macOS version against the patched releases. Use the command 'sw_vers' to check your macOS version. If your version is below Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6, your system is vulnerable.

Impact Analysis

An attacker could exploit this to crash your device or the vulnerable application, leading to loss of service or data. It primarily affects macOS systems running Sequoia, Sonoma, or Tahoe versions before the patched releases.

Compliance Impact

This vulnerability is a stack overflow issue that could lead to a denial-of-service. It does not directly affect compliance with standards like GDPR or HIPAA as it is a technical flaw rather than a data protection or privacy issue.

Mitigation Strategies

Update to the latest patched versions of macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6 to address the stack overflow vulnerability.

Hi! I’m here to help you understand CVE-2026-43771. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...