A race condition in Apple’s operating system state handling can allow a malicious or untrusted application to trigger unexpected system termination or create the possibility of writing to kernel memory. This flaw can lead to denial‑of‑service by crashing the device and may grant elevated privileges if an attacker succeeds at corrupting kernel objects, compromising confidentiality, integrity, and availability of the affected device.

Apple iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6 are affected. The vulnerability is tied to the operating system kernel and the broader platform stack, impacting all devices running these versions.

With a CVSS score of 9.8 and an EPSS score of < 1%, the vulnerability is high severity but with a very low probability of exploitation. Because the defect permits writing to kernel memory, the potential impact is severe. Exploitation would likely require a specially crafted local application or code executed with elevated privileges. Since the bug is fixed in the mentioned updates the risk is contingent on whether an affected device has attempted to install the update. The lack of a KEV listing suggests no public exploit code is known, but the severity of kernel corruption warrants caution.