CVE-2026-28911

Undergoing Analysis Undergoing Analysis - In Progress

Memory Corruption in macOS Sonoma

Publication date: 2026-07-27

Last updated on: 2026-07-29

Assigner: Apple Inc.

Description

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-29

Generated

2026-08-17

AI Q&A

2026-07-28

EPSS Evaluated

2026-08-15

NVD

CVE-2026-28911

EUVD

EUVD-2026-49426

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 14.0 (inc) to 14.8.8 (exc)
apple	macos	From 26.0 (inc) to 26.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability involves a memory corruption issue in macOS Sonoma and Tahoe. A malicious app could exploit this to corrupt memory in a system process, potentially leading to crashes or unauthorized code execution.

Detection Guidance

This vulnerability is specific to macOS Sonoma and Tahoe and involves memory corruption by a malicious app. Detection requires checking system versions and monitoring for unusual app behavior. Use 'sw_vers' to check macOS version and 'ps aux' to inspect running processes for suspicious activity.

Impact Analysis

If exploited, this vulnerability could allow an attacker to crash your system or run malicious code with elevated privileges. This could compromise your data, privacy, or system integrity.

Compliance Impact

The vulnerability involves memory corruption in system processes, which could potentially allow malicious apps to execute unauthorized actions. This may impact compliance with standards like GDPR (data protection) or HIPAA (health data security) if exploited to access or manipulate sensitive data. However, the provided CVE details do not specify direct compliance implications.

Mitigation Strategies

Update to macOS Sonoma 14.8.8 or macOS Tahoe 26.6 or later versions to address the memory corruption issue.

Hi! I’m here to help you understand CVE-2026-28911. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70