A vulnerability involving an out‑of‑bounds write was identified in Apple operating systems. The flaw enables an application to overwrite memory beyond intended bounds, potentially granting the code execution with kernel privileges. Such escalation could allow an attacker to compromise system integrity and confidentiality by running arbitrary code at the highest execution level.

Apple’s iOS and iPadOS versions through 18.7.8, macOS Sequoia 15.7.6, macOS Sonoma 14.8.6, and macOS Tahoe 26.4 are likely affected based on the versioning pattern and the fixed releases listed, though only the fixed versions are explicitly documented.

The vulnerability carries a CVSS score of 5.4, indicating moderate severity, and is not listed in the CISA KEV catalog. The EPSS score is below 1 %, implying a low probability of exploitation. Based on the description, the likely attack vector involves a local application that can trigger the out‑of‑bounds write; remote exploitation would require additional conditions not detailed in the advisory.