Comment on CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by ClaudeparentComments−pjmlp3moWhich gets even better by still using C.Large majority of CVEs in the update are related to memory corruption, out of bounds and use after free.Naturally the logic and wrong permissions ones would happen regardless of the language.−sitkack3moA strong enough type system can catch permission problems.−pjmlp3moThe solution there would be a capabilities based OS, however adoption hasn't been great on that regard.−sitkack3moI'd love to see CHERI (for the room) and Wasm take off, no time like the present.https://en.wikipedia.org/wiki/Capability_Hardware_Enhanced_R...https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/
Comments
Which gets even better by still using C.
Large majority of CVEs in the update are related to memory corruption, out of bounds and use after free.
Naturally the logic and wrong permissions ones would happen regardless of the language.
A strong enough type system can catch permission problems.
The solution there would be a capabilities based OS, however adoption hasn't been great on that regard.
I'd love to see CHERI (for the room) and Wasm take off, no time like the present.
https://en.wikipedia.org/wiki/Capability_Hardware_Enhanced_R...
https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/