CVE-2026-64696 is a critical remote code execution vulnerability in Apple macOS involving improper memory handling that can lead to unexpected system termination or kernel memory corruption. The vulnerability affects multiple macOS branches and has been addressed by Apple in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The CVSS 3.1 base score of 9.8 reflects the vulnerability's ease of exploitation (network vector, no privileges or user interaction required) and its severe impact on system confidentiality, integrity, and availability. No known exploits in the wild have been reported at this time.

Successful exploitation allows a remote attacker to cause a denial of service through unexpected system termination or potentially corrupt kernel memory, which could lead to system instability or further compromise. The vulnerability affects core system components, impacting confidentiality, integrity, and availability of the affected macOS systems.

Apple has released official fixes for this vulnerability in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Users and administrators should apply these updates promptly to remediate the issue. Patch status is confirmed by the vendor advisory indicating the issue is fixed in these versions. No additional mitigation steps are specified.