CVE-2026-39873

CriticalCVSS 9.8

Published: 27/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

Connecting to a malicious SMB server may lead to unexpected system termination. The issue was addressed with improved memory handling.

Risk Assessment

A remote attacker could cause a system crash (DoS), potentially disrupting services.

Recommendation

It is recommended to update macOS systems to Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6.

Original NVD description (English source)

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.