Apple Updates Everything, (Mon, Sep 14th)
Apple patched a record 261 vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS 27, and other platforms, with none flagged as exploited.
58
Vulnerability1 · 1 read
CVE-2026-28934
macOS Disk Image Mounting Buffer Overflow Can Crash the System
- CVSS 3.1
- 6.5 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A buffer overflow in Apple's macOS disk image handling was fixed with improved bounds checking, with patches shipping in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The flaw is triggered when a user mounts a maliciously crafted disk image, which may cause unexpected system termination. Apple's advisory credits the bug only with a crash/DoS, but memory-corruption flaws of this class warrant prompt patching since code execution cannot be ruled out. All Macs running macOS Sequoia before 15.8, macOS Tahoe before 26.7, or macOS Golden Gate before 27 are affected. No public proof-of-concept or in-the-wild exploitation is known, and the issue is not on CISA's KEV list.
What to do: Update to macOS Sequoia 15.8, macOS Tahoe 26.7, or macOS Golden Gate 27 depending on the installed major version. Instruct users not to mount disk images (.dmg, .iso, sparse bundles) from untrusted sources or unexpected downloads. No other workaround is documented, so patching via Software Update is the primary mitigation.
| Product | Affected |
|---|---|
| Apple macOS Sequoia | before 15.8 |
| Apple macOS Tahoe | before 26.7 |
| Apple macOS Golden Gate | before 27 |
Estimated exposure
masstens of millions of Macs (Sequoia and Tahoe are the two most recently shipped macOS releases) — Apple's active Mac installed base exceeds 100 million devices, and the two newest macOS releases typically account for the majority of that base within months of shipping.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination.