{"id":"CVE-2026-65374","aliases":["EUVD-2026-78034","GHSA-g4cq-5gxj-h4r8"],"status":"published","title":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS...","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00528,"percentile":0.45185,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-787"],"published":"2026-09-14T20:49:01Z","modified":"2026-10-26T20:37:24Z","exploits":[{"source":"pocgithub","id":"HORKimhab/CVE-2026-65374","title":"HORKimhab/CVE-2026-65374","date":"2026-09-16","url":"https://github.com/HORKimhab/CVE-2026-65374"}],"products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/149035","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/149042","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/149043","tags":["Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65374"},{"url":"https://github.com/advisories/GHSA-g4cq-5gxj-h4r8"}],"sources":{"cve":[{"id":"CVE-2026-65374","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.","status":"published","published":"2026-09-14T20:49:01.246Z","modified":"2026-10-26T20:37:24.217Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T13:37:13.934727Z"}],"euvd":[{"id":"EUVD-2026-78034","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.","status":"published","published":"2026-09-14T20:49:01Z","modified":"2026-10-26T20:37:24Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:59:27.138919Z"}],"ghsa":[{"id":"GHSA-g4cq-5gxj-h4r8","title":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS...","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.","status":"published","published":"2026-09-14T21:31:50Z","modified":"2026-09-15T15:31:56Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:11:54.134441Z"}],"nvd":[{"id":"CVE-2026-65374","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.","status":"published","published":"2026-09-14T21:17:21.81Z","modified":"2026-09-16T04:18:38.75Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:12:47.335523Z"}]}}