CVE-2023-40436: Apple macOS

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected system termination or read kernel memory.

Affected products

• Apple macOS: before 14.0 (fixed in 14.0)

Published 2023-09-27. Last modified 2026-06-17.