A type confusion flaw allowing an application to cause an unexpected system termination was identified in Apple operating systems. The vulnerability results from an object being misidentified as another type, leading to unsafe handling and a crash of the operating system. The crash stops the system from operating normally and can cause loss of device functionality.

The flaw affects Apple’s mobile and desktop operating systems: iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. Any device running one of these affected versions is susceptible to the crash triggered by a malicious application.

The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, so there is no reported public exploitation activity. A CVSS score was not supplied, so the severity is not formally quantified in the data. Based on the description, it is inferred that the attack vector is local, with the flaw exploitable by a malicious application running on the device. Once exploited, the vulnerability results in a denial of service by terminating the operating system and may expose the device to additional instability if the crash occurs during critical operations.