{"id":"CVE-2026-28925","state":"PUBLISHED","title":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexp","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termination or write kernel memory.","publishedAt":"2026-05-11T20:08:05.529Z","updatedAt":"2026-05-12T13:30:10.805Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.5","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/127115","https://support.apple.com/en-us/127116","https://support.apple.com/en-us/127117"],"weaknesses":["CWE-120"],"ingestedAt":"2026-10-29T20:11:31.369Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/28xxx/CVE-2026-28925.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-28925","state":"PUBLISHED","datePublished":"2026-05-11T20:08:05.529Z","dateUpdated":"2026-05-12T13:30:10.805Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2026-03-03T16:36:03.987Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termination or write kernel memory."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.8.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.7.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"26.5","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/127115"},{"url":"https://support.apple.com/en-us/127116"},{"url":"https://support.apple.com/en-us/127117"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to cause unexpected system termination or write kernel memory"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-05-11T20:08:05.529Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-05-12T13:30:04.828827Z","id":"CVE-2026-28925","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","type":"CWE","lang":"en","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-12T13:30:10.805Z"}}]}}}