Impact
Improper memory handling in macOS occurs when a device connects to an SMB server. A malicious SMB server can trigger a crash, leading to unexpected system termination. The result is a denial‑of‑service condition; no code execution or data exfiltration is possible based on the description.
Affected Systems
Apple macOS versions before Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 are vulnerable. All vendors refer to these releases by the macOS product name.
Risk and Exploitability
The CVSS score of 9.8 classifies this flaw as critical, while the EPSS score of less than 1% indicates a very low likelihood of exploitation at the moment. The vulnerability is not listed in the CISA KEV catalog. The flaw appears to be exploitable via remote SMB communication; a malicious SMB server can trigger an improper memory handling condition in macOS that causes the system to terminate unexpectedly, resulting in denial of service. No evidence suggests additional impacts such as code execution or data exfiltration.
OpenCVE Enrichment