A memory handling flaw was identified that can cause the system to become unresponsive. The vulnerability, designated CWE-400, allows an attacker with elevated privileges to trigger a denial‑of‑service condition by making the operating system exhaust or mismanage its memory resources. When successfully exploited, the affected macOS instance can no longer process legitimate user requests, resulting in availability loss for both local and potentially network‑connected services.

Apple macOS is affected. Any installation before macOS Sequoia 15.4, Sonoma 14.7.5, or Ventura 13.7.5 is vulnerable. The flaw is fixed only in the listed patch versions or later; earlier releases remain at risk and should be upgraded as soon as possible.

The CVSS score of 9.8 indicates a high‑severity flaw with full exploitation potential. The EPSS score of less than 1% suggests that, at present, the probability of exploitation is low, but this does not eliminate the risk. The vulnerability is not currently listed in CISA’s KEV catalog, which means no known public exploits have been documented yet. Attackers would need a privileged position on the target system to trigger the memory exhaustion or mismanagement that leads to the denial‑of‑service. The impact is limited to availability and does not appear to affect confidentiality or integrity.