Impact
A type confusion error in memory handling was identified in Apple's macOS and tvOS platforms, allowing an application to induce an unexpected system termination. The flaw permits an attacker to cause a crash that could be leveraged to disrupt services or user experience. The weakness aligns with improper type checking that can lead to fatal memory corruption.
Affected Systems
Apple macOS and tvOS devices running any version prior to 26.6 are vulnerable. The issue was addressed and fixed in Apple OS release 26.6 for both operating systems. No other affected versions are documented at this time.
Risk and Exploitability
The vulnerability is a high‑impact denial‑of‑service flaw; its exploitation would require the ability to run or trigger an application susceptible to the type confusion. The EPSS score is < 1%, and it is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation. Nevertheless, the potential for application‑initiated crashes warrants prompt remediation. The attack vector is inferred to be local or remote if an application can be executed with sufficient privileges, given that the flaw operates within the app's memory space.
OpenCVE Enrichment