Impact
A race condition in macOS can trigger unexpected system termination. The flaw, identified as CWE-362, allows concurrent threads or processes to interfere with each other’s state handling, potentially causing the operating system to crash or halt without warning. The impact is a denial‑of‑service scenario where the system becomes unavailable for legitimate use.
Affected Systems
Apple macOS versions before Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4 are affected. Users running any earlier releases of these macOS iterations are vulnerable to the crash condition until the security update is applied.
Risk and Exploitability
The CVSS score of 5.1 indicates a moderate severity, while an EPSS score of less than 1% implies a low likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog, further suggesting limited active exploitation. The attack vector likely requires a locally executed race condition between concurrent processes or elevated privileges, which may constrain an attacker’s reach but still enables service disruption if successfully leveraged.
OpenCVE Enrichment