CVE-2026-28911

CriticalCVSS 9.8

Published: 27/07/2026(UTC)Updated: 29/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

A memory handling vulnerability in macOS systems. A malicious app may corrupt memory of a system process.

Risk Assessment

A malicious app can corrupt memory of a system process, potentially leading to system crash or compromise.

Recommendation

Update systems to macOS Sonoma 14.8.8 or macOS Tahoe 26.6.

Original NVD description (English source)

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.