Impact
This vulnerability arises from improper management of object lifetimes within macOS, allowing an attacker to cause unexpected termination of applications. The result is a denial of service by disrupting application availability. The weakness is classified as CWE-772, which pertains to improper release or failure to release resources.
Affected Systems
The flaw affects Apple macOS on versions that precede the security updates: macOS Sequoia prior to 15.3, macOS Sonoma prior to 14.7.3, and macOS Ventura prior to 13.7.3. All other Apple macOS releases built after these dates are considered hardened.
Risk and Exploitability
The CVSS score of 7.5 underscores its high severity, although the EPSS score of less than 1% suggests exploitation is currently unlikely. The vulnerability is not listed in CISA's KEV catalog. Because the advisory does not describe a concrete attack vector, it is inferred that exploitation may require local access or the presence of malicious software that can trigger the object lifetime misuse. The overall risk is moderate to high, primarily as a denial-of-service vector rather than a remote code execution.
OpenCVE Enrichment
EUVD