Impact
The vulnerability arises from inadequate memory handling within the macOS kernel, enabling an attacker to cause an unexpected system termination or corrupt kernel memory. This type of kernel corruption can result in a denial of service and may potentially expose the system to further compromise. The weakness is rooted in buffer handling and memory management flaws.
Affected Systems
Apple macOS versions released before Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6 are affected by this issue. All earlier builds of these operating system lines remain vulnerable until the patches are applied.
Risk and Exploitability
Based on the description, the advisory does not specify a precise exploitation context, but kernel memory corruption could theoretically be leveraged from both local and remote positions. The CVSS score of 9.8 denotes critical severity, indicating that a successful exploitation could terminate the system or expose it to additional attacks. The EPSS score is < 1 %, signalling a very low but nonzero probability of exploitation, and the vulnerability is not listed in CISA KEV.
OpenCVE Enrichment