A type confusion flaw in macOS’ memory handling can be triggered by a malicious application, causing the operating system to terminate unexpectedly. The vulnerability does not allow code execution or data disclosure; it results in a service disruption that stops the entire system, potentially leading to data loss if unsaved work is present. The weakness is identified as CWE‑843, a type inconsistency in object handling.

Apple macOS versions older than Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6 are impacted. The issue was addressed in those update releases and is not present in the listed versions.

The CVSS score of 9.8 indicates a critical impact, while the EPSS score of < 1% suggests a very low likelihood of exploitation. Attackers would need to deliver a malicious application that exercises the type‑confusion path; because the flaw does not grant execution privileges, the effect is limited to a system crash. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that the likely attack vector is through a malicious application run on the local system.