Back Xint

Xint Code Discovers 9.8 CVSS Critical Bug in Apple Devices

Xint • August 3, 2026

Apple’s latest releases for iOS , iPadOS , and macOS have patches for two vulnerabilities found by Xint, including a critical 9.8 severity kernel vulnerability requiring no user interaction.

CVSS: 9.8 ( Critical )

An app may be able to cause unexpected system termination without requiring user interaction. A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6.

An information leakage was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical 9.8 CVSS Bug Discovered in Apple Devices Xint has identified a critical kernel vulnerability in Apple devices, rated 9.8 on the CVSS scale, that allows apps to cause unexpected system termination without user interaction. This vulnerability affects iOS, iPadOS, and macOS systems, with patches released in versions 26.6 for iOS and iPadOS, and 15.7.8 for macOS Sequoia and Sonoma. Additionally, an information leakage vulnerability was also addressed, which could allow apps to disclose kernel memory. The critical bug was published as CVE-2026-64744 on July 27, 2026. Users are advised to update their devices to mitigate these risks. The vulnerabilities were confirmed by Xint and have been patched in the latest software updates. 2 sources 73

Xint Code Discovers 9.8 CVSS Critical Bug in Apple Devices

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (6)