CVE detail
CVE-2026-43771
A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 4
- within the 30d window
- Peak daily
- 3
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- The July 2026 Apple Security Update ReviewZero Day Initiative
ation, we’re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out. · CVE-2026-43818 (ImageIO) – This bug could allow the “Processing [of] a maliciously crafted image may lead to arbitrary code execution ." ImageIO is the classic zero-/one-click remote surface on Apple platforms (images auto-parsed in M
vendorwww.thezdi.comJul 30, 2026, 2:00 PM - https://support.apple.com/en-us/128072support.apple.com
No excerpt available.
Vendor Advisorysupport.apple.comJul 27, 2026, 9:17 PM - https://support.apple.com/en-us/128071support.apple.com
No excerpt available.
Vendor Advisorysupport.apple.comJul 27, 2026, 9:17 PM - https://support.apple.com/en-us/128067support.apple.com
No excerpt available.
Vendor Advisorysupport.apple.comJul 27, 2026, 9:17 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-50527CVSS 7.5 · High
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
- CVE-2026-43718CVSS 6.5 · Medium
A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, wa…
- CVE-2026-47959CVSS 7.8 · High
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con…
- CVE-2026-34708CVSS 7.8 · High
InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us…
- CVE-2026-34702CVSS 7.8 · High
InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…
- CVE-2026-34697CVSS 7.8 · High
InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the…