Apple operating systems contain a vulnerability in memory handling that allows a remote attacker to overwrite kernel memory or trigger an unexpected system termination, resulting in potential loss of data integrity and availability. The weakness is related to buffer overflows, use‑after‑free, and out‑of‑bounds writes, as reflected by the associated CWEs. The impact is severe, as kernel corruption could lead to privilege escalation or complete denial of service on the affected device.

All Apple platforms—including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS—are affected if they run a release prior to the specified fixes. The vulnerability has been addressed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

The CVSS score of 9.8 marks this as a very high‑severity issue, while the EPSS score of less than 1% indicates a low but non‑zero probability of exploitation. The flaw can be triggered by a remote user without special local privileges, making it a significant risk for exposed devices, although real‑world exploitation remains uncertain due to the low exploitation probability. The vulnerability is not listed in the CISA KEV catalog.