CVE-2025-46284
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A race condition was addressed with additional validation in macOS Sequoia 15.7 and macOS Tahoe 26. An app may be able to gain root privileges.
Risk Assessment
Risk of privilege escalation to root by a malicious app, potentially leading to full system control.
Recommendation
It is recommended to update macOS to version Sequoia 15.7 or Tahoe 26.
Other vulnerabilities in macOS
See all- CVE-2026-39870High
The issue was addressed with improved memory handling. Exploitation of this vulnerability may lead to process memory corruption when processing a maliciously crafted image.
- CVE-2026-28915High
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.
- CVE-2026-65400CriticalActively exploited
An authentication issue was addressed with improved state management. This issue affects macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, and macOS Tahoe 26.6.1. A network attacker may be able to authenticate to Screen Sharing without valid credentials.
- CVE-2026-43773Critical
An out-of-bounds read was fixed with improved bounds checking. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43764Critical
An integer overflow was addressed with improved input validation. An app may cause unexpected system termination.
- CVE-2026-43750Critical
A buffer overflow in macOS allows an app to execute arbitrary code out of its sandbox or with elevated privileges. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.
- CVE-2026-43748Critical
An out-of-bounds write issue in macOS may cause unexpected system termination by an app. This is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.
- CVE-2026-43710Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an attacker to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.
- CVE-2026-43694Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an app to cause unexpected system termination or write kernel memory. Fixed with improved memory handling.
- CVE-2026-43682Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing a remote user to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.
Original NVD description (English source)
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to gain root privileges.