Zero Day MonitorZDM

← Back to list

9.8

CVE-2026-43773PATCHED

apple · macos

CVE-2026-43773: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS So

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

Affected Products

Vendor	Product	Versions
apple	macos	0, 0, 0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
apple	macos	cert_advisory	90%

References

Related News (3 articles)

Tier B

BSI Advisories15d ago

[NEU] [hoch] Apple macOS (Tahoe, Sonoma und Sequoia): Mehrere Schwachstellen

→ No new info (linked only)

Tier B

CERT-FR16d ago

Multiples vulnérabilités dans les produits Apple (28 juillet 2026)

→ No new info (linked only)

Tier C

VulDB16d ago

CVE-2026-43773 | Apple macOS up to 14.8.7/15.7.7/26.5 out-of-bounds

→ No new info (linked only)

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

14.8.815.7.826.6

PublishedJul 27, 2026

Trending Score11

Source articles3

Independent3

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-65400EXPKEV

CVE-2026-65400: An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS

CRITICALCVE-2026-64767

CVE-2026-64767: A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma

NONECVE-2026-65370

CVE-2026-65370: ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. Th

CRITICALCVE-2026-43810

CVE-2026-43810: The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15

CRITICALCVE-2026-64727

CVE-2026-64727: A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6.

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 27, 2026

Discovered by ZDM

Jul 27, 2026

Patch Available

Jul 28, 2026