{"id":"CVE-2026-65374","title":"A memory corruption issue was addressed with improved validation","summary":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"vendor":"apple","product":"macos","affected":["macos >= 15.0, < 15.8","macos >= 26.0, < 26.7"],"patched":["macos 26.7"],"published":"2026-09-14","updated":"2026-09-16","sourceUpdated":"2026-09-16T04:18:38.750","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-65374","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-15T14:28:35.018054Z"},"epss":0.0039,"epssPercentile":0.32923,"ingestedAt":"2026-09-14T21:15:17.526Z","exploits":{"github":1,"githubRepos":["https://github.com/HORKimhab/CVE-2026-65374"],"checkedAt":"2026-09-21T15:30:08.459Z"},"exploitAvailable":true,"slug":"CVE-2026-65374","body":"## Overview\n\nA memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.\n\n## Affected\n\n- `macos >= 15.0, < 15.8`\n- `macos >= 26.0, < 26.7`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `macos 26.7`","depth":"midnight","depthScore":60,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":205418,"id":"CVE-2026-65374","ts":1789575716760,"field":"exploit_available","old":"false","new":"true"},{"seq":203701,"id":"CVE-2026-65374","ts":1789483137167,"field":"cvss","old":null,"new":"8.8"},{"seq":203700,"id":"CVE-2026-65374","ts":1789483137167,"field":"severity","old":"none","new":"high"}]}