A use after free vulnerability was identified in Apple’s operating systems where memory management was improved to address earlier issues. This flaw allows an application to trigger a free operation on memory that is still in use, potentially causing the system to crash or terminate unexpectedly. The impact is a loss of availability, as the failure can bring down critical system processes without any direct data compromise or persistence.

Apple products are affected, including iOS, iPadOS, macOS, tvOS, and watchOS. The vulnerability is fixed in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6, so all devices running earlier releases are susceptible.

The EPSS score of < 1% and the fact that the vulnerability is not listed in the CISA KEV catalog indicate a very low but nonzero probability of exploitation. The CVSS score of 9.8 reflects a high severity. No public proof‑of‑concept exploitation data exists as of the current assessment. The risk is inferred primarily from the nature of a use after free leading to system termination. Based on the description, exploitation would likely require the attacker to supply a crafted application that exercises the freed memory region, suggesting a local or privileged attack vector rather than a remote one. The highest threat remains a denial of service rather than privilege escalation or data theft.