Impact
The vulnerability in macOS results from improper memory handling that can allow a local application to read sensitive kernel memory or cause the system to terminate unexpectedly. This flaw may expose privileged data stored in memory and lead to a denial of service if the operating system crashes. The issue is a buffer overrun (CWE-119).
Affected Systems
Apple macOS versions earlier than macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 are affected. The issue is fixed in those newer builds, which incorporate improved memory handling.
Risk and Exploitability
Based on the description, the flaw appears to require local execution; an attacker must run code within a sandboxed or privileged process to trigger the memory issue. An EPSS score of < 1% indicates a low probability of exploitation, and the vulnerability is not listed in CISA KEV. Because the description indicates a local trigger and no publicly documented exploits, the risk is considered significant, but the lack of exploitation evidence suggests moderate likelihood. Nonetheless, the potential impact includes kernel‑memory disclosure and system crash, warranting immediate remediation.
OpenCVE Enrichment