The vulnerability arises from improper memory handling in several Apple operating systems, which an attacker on a local network can exploit to cause a denial‑of‑service. By triggering inappropriate memory accesses, a local adversary can crash the affected system, disrupting its availability. The weakness is consistent with a resource exhaustion scenario (CWE‑400).

Affected Apple products include iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Versions before iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6 are susceptible. The security update in these releases addresses the defect.

The EPSS score is less than 1 %, indicating a low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, signifying no known mass‑targeted attacks. The CVSS score of 5.5 reflects a moderate impact when exploiting the flaw. An attacker must be on the local network and capable of sending crafted traffic to trigger the improper memory handling, which can lead to a denial‑of‑service. Given the low exploitation likelihood, the risk remains moderate but remediation is still advisable.