VulnSocial

CVE-2026-65374Patch(apple / macos)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch apple macos systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.

apple CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • macos

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • 2 total mentions across 1 day

Affected systems

Vendors
apple
Products
macos

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-18: 2Patch / Workaround · 2026-09-18: 2Technical Details · 2026-09-18: 209-18
Signal classification1 categories
Patch
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Ryx@PadhiyarRushi
    Patch

    Kernel-level WebDAV and SMB bugs landed in the same Sequoia 15.8 drop. WebDAV: CVE-2026-65374 (code execution on malicious server) SMB: multiple OOB reads/writes and UAFs when connecting to a malicious share (CVE-2026-43719, 84515, 65365, etc.) Network file systems remain a reliable source of high-impact client bugs. https://support.apple.com/en-us/149043 #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #macOS #KernelSecurity

    Post summary

    The post highlights kernel-level WebDAV and SMB vulnerabilities associated with CVEs in the macOS Sequoia 15.8 update, with technical details but no PoC, exploit, or active exploitation reported.

    10030523
    954 followersView on X
  • Rıdvan Yağlı@ridvanyagli
    Patch

    🔴 Apple, macOS WebDAV bileşeninde CVE-2026-65374 olarak izlenen yüksek önem dereceli bir memory corruption açığını yamaladı. Kötü amaçlı bir WebDAV sunucusuna bağlanılmasıyla tetiklenebilen CWE-787 (Out-of-bounds Write) açığı, kod çalıştırmaya yol açabiliyordu. CVSS 3.1: 8.8 HIGH Etkilenen sürümler: macOS 15.0–15.7 ve 26.0–26.6 Yama: macOS Sequoia 15.8 / Tahoe 26.7 / Golden Gate 27 Güvenlik bildirisi: https://support.apple.com/en-us/149043

    Post summary

    Apple has patched a high-severity memory corruption vulnerability (CVE-2026-65374) in macOS WebDAV, with affected versions and patched versions clearly identified.

    00010345
    2.4K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---

Explore more

Back to dashboardapple CVEsmacos vulnerabilities