{"id":"CVE-2026-65396","kind":"vulnerability","aliases":["CVE-2026-65396"],"related":[],"title":"Apple macOS: buffer overflow lets an app crash the system","description":"A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","summary":"A buffer overflow in macOS allowed by insufficient size validation can be triggered by an app. Per the description, it can cause unexpected system termination.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","endpoints","infrastructure","macos"],"not_affected_if":["already-patched-macos"],"how_to_check":"- Run `sw_vers` and compare the ProductVersion against the fixed releases listed in Fix.","fix":"- Update macOS Golden Gate to `27`, macOS Sequoia to `15.8`, or macOS Tahoe to `26.7` (or later) via Software Update.","status":"open","published_at":"2026-10-20T01:17:18+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T04:12:40+00:00","updated_at":"2026-10-25T04:12:40+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T04:12:40Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS Golden Gate to `27`, macOS Sequoia to `15.8`, or macOS Tahoe to `26.7` (or later) via Software Update.","reach":"local","title":"Apple macOS: buffer overflow lets an app crash the system","impact":"low","summary":"A buffer overflow in macOS allowed by insufficient size validation can be triggered by an app. Per the description, it can cause unexpected system termination.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","endpoints"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A local app crashes the system unexpectedly.","analyst_note":"Sources are only the NVD entry with a one-line description; check Apple's security notes for the CVE to confirm the triggering conditions and whether code execution is possible.","how_to_check":"- Run `sw_vers` and compare the ProductVersion against the fixed releases listed in Fix.","needs_analyst":true,"not_affected_if":["already-patched-macos"],"who_is_affected":"Machines running macOS releases prior to the fixed versions listed above. The sources do not say which configurations or app types are needed to trigger it beyond the app itself; unknown whether managed fleets need special setup.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000566,"input_tokens":3277,"output_tokens":476,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-65396':13A,16A '15.8':66C '26.7':69C '27':63C 'abl':74C 'address':50C 'allow':26B 'app':7A,36B,71C 'appl':1A,17B 'buffer':3A,22B,47C 'caus':42B,76C 'crash':8A 'cve':11A,14A 'descript':39B 'endpoint':18B 'fix':58C 'gate':62C 'golden':61C 'improv':52C 'infrastructur':19B 'insuffici':28B 'issu':56C 'let':5A 'maco':2A,20B,25B,60C,64C,67C 'may':72C 'overflow':4A,23B,48C 'per':37B 'sequoia':65C 'size':29B,53C 'system':10A,44B,78C 'taho':68C 'termin':45B,79C 'trigger':33B 'unexpect':43B,77C 'valid':30B,54C","nicknames":[],"mitigations":[],"who_affected":"Machines running macOS releases prior to the fixed versions listed above. The sources do not say which configurations or app types are needed to trigger it beyond the app itself; unknown whether managed fleets need special setup.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:18+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-65396","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65396","severity":null,"published_at":"2026-10-20T01:17:18+00:00","modified_at":"2026-10-20T15:17:30+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}