CVE-2026-43815: Buffer Overflow

Published Sep 14, 2026

Updated

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to kernel memory corruption.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Apple macOS to a version that resolves this vulnerability.
Fixed in 15.7.8
Upgrade
Upgrade Apple macOS to a version that resolves this vulnerability.
Fixed in 14.8.8
Upgrade
Upgrade Apple macOS to a version that resolves this vulnerability.
Fixed in 26.6

Event History

Sep 14, 2026

CVE Published

via MITRE·08:50 PM

Data Sourced

via MITRE·08:50 PM

DescriptionWeakness

Frequently Asked Questions

What interaction is required for exploitation?

A system must connect to a malicious afpfs server. The reported impact is kernel memory corruption.

Which systems have fixes available?

Apple fixed the issue in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.