A buffer overflow in the macOS kernel allows a local user to read data from the kernel’s address space. The vulnerability was mitigated by adding improved bounds checking during kernel operations. Because the overflow can expose contents of the kernel memory, an attacker could potentially retrieve sensitive data or find footholds for further exploitation, even though no remote execution path is described in the data.

Apple macOS systems are affected. Versions prior to the fixes—up to macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5—are vulnerable. The fixes are incorporated in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6, so any earlier release remains at risk.

The CVSS base score of 7.1 indicates a medium‑to‑high severity, while the EPSS score of less than 1% suggests the likelihood of exploitation is low at present. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local, requiring a user with object‑level access to the target machine. No remote exploitation vector is provided, so the impact is confined to local privilege escalation or information disclosure for authenticated users.