Skip to content
COOEY

EXPOSURES › CVE-2026-43790

CVE-2026-43790

CRITICAL
DETAIL
SourceNVD · cve Published2026-09-14 CVSS9.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-43790 ↗
SHAME 45/100 unpatched

A remote attacker could crash macOS or corrupt kernel memory via a memory handling flaw fixed in recent updates.

This kernel memory corruption vulnerability allows remote attackers to cause system termination or data loss, impacting DIB systems relying on Apple hardware. Organizations must ensure all macOS devices are patched to the latest versions to prevent exploitation. The flaw was not zero-day but was addressed with improved memory handling in recent macOS updates.

Shame score — A critical kernel vulnerability that could cause system crashes or data corruption, though it was not exploited in the wild and was promptly addressed with a patch.

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

DESCRIPTION

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.