Impact
The vulnerability arises from flaws in memory handling that can enable a malicious or buggy application to cause the operating system to terminate unexpectedly, effectively disrupting service availability. This forms a classic denial‑of‑service scenario where a process can crash the system, potentially affecting user sessions and data integrity.
Affected Systems
Apple macOS, including Sequoia, Sonoma and Tahoe versions prior to 15.7.8, 14.8.8 and 26.6 respectively, are affected. The patch versions contain improved memory handling that resolves the issue. Based on the description, it is inferred that earlier macOS versions prior to those patches are vulnerable.
Risk and Exploitability
The CVSS score of 5.5 indicates a medium severity vulnerability. The EPSS score is less than 1%, meaning the estimated probability of exploitation is very low. The vulnerability is not listed in the CISA KEV catalog, suggesting no known active exploitation. The flaw can be triggered by any application running on affected macOS releases, implying local exploitation potential. As the weakness stems from memory handling, a malicious or buggy app can cause unexpected system termination, leading to a denial‑of‑service condition.
OpenCVE Enrichment