CVE-2026-43790 – Apple macOS

CVSS 9.1 CRITICAL [2] Critical – Same Day Deployment

“Two critical kernel memory flaws sit beneath every Mac in the fleet, so a crash today can become a full compromise tomorrow.”

Apple's latest macOS update fixes two Critical kernel memory flaws. CVE-2026-43790 has a CVSS score of 9.1, Critical severity. A remote attacker can use it to crash the system or corrupt kernel memory, and Apple resolved it with improved memory handling in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. CVE-2026-84520 has a CVSS score of 9.8, Critical severity. This buffer overflow lets a local attacker crash the system or corrupt kernel memory, and Apple fixed it with improved size validation in macOS Golden Gate 27.

Kernel memory corruption hits the core of the operating system, which puts system stability and the integrity of every workload on affected Macs at risk. Deploy these updates across all macOS endpoints today.

Key Details

Affected Product: Apple Macos
Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
CWE Classification: CWE-787

Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.