Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
I finally got around to the writeup for my 2nd $20,000 bounty from @Apple here: https://github.com/petermalone/CVE-2026-84543 @gergely_kalman I know you had specifically asked for this so here you go. I learned so much playing around with this. I'll document the first later this week. Enjoy! Thanks again to @Apple - the bounty announcement took just 11 days for this one. Crazy.
A PoC/exploit has been discovered for vulnerability CVE-2026-84543 PT ID: PT-2026-91603 Vendor: Apple Product: macOS Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory. References: • https://dbu.gs/vulnerability/PT-2026-91603 • https://github.com/petermalone/cve-2026-84543
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |