This vulnerability is a use-after-free flaw (CWE-416) in Apple iOS and iPadOS that could be exploited by a malicious app to cause unexpected system termination or to write to kernel memory, potentially leading to privilege escalation or system compromise. The issue was resolved by Apple through improved memory management and is fixed in versions 26.6 of iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. No known exploits are reported in the wild at this time.

Successful exploitation could allow an attacker to cause a denial of service via unexpected system termination or potentially execute arbitrary code with kernel privileges by writing to kernel memory. This impacts system confidentiality, integrity, and availability severely, as reflected by the CVSS 9.8 score.

A fix is available in iOS 26.6 and iPadOS 26.6 (and corresponding versions of other Apple OSes). Users and administrators should update to these versions to remediate the vulnerability. Patch status is confirmed by the vendor advisory stating the issue is fixed in these versions.