CVE-2026-28911: Apple macOS

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.

Affected products

• Apple macOS: from 14.0, before 14.8.8 (fixed in 14.8.8); from 26.0, before 26.6 (fixed in 26.6)

Published 2026-07-27. Last modified 2026-07-29.