Technical impact
An out‑of‑bounds read flaw in macOS allows code to read beyond intended memory boundaries, potentially exposing kernel data and causing the operating system to terminate unexpectedly. The vulnerability was remedied by removing the affected code path, signifying its critical nature for both confidentiality and availability.
Affected Systems
The flaw affects Apple’s macOS platform, specifically macOS Golden Gate version 27.2 and macOS Tahoe version 26.7.2. These releases are now secure after the removal of the vulnerable code.
Risk and Exploitability
Although the EPSS score of <1% indicates a very low but non-zero exploitation probability and the issue is not listed in CISA KEV, the described impacts indicate a high risk. An attacker with access to a vulnerable application could trigger the read, learn kernel secrets, or force a crash, leading denial of service or information disclosure.
