This vulnerability, identified as CVE-2026-28896, involves improper memory handling in macOS that could be exploited by an attacker to cause a denial of service (system crash) or to read kernel memory, leading to potential information disclosure. The issue is classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). It has a CVSS v3.1 base score of 7.7, indicating high severity, with attack vector local, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. The vendor has fixed the issue in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8.

An attacker with local access could exploit this vulnerability to cause the system to terminate unexpectedly (denial of service) or to read sensitive kernel memory, potentially exposing confidential information. There is no indication of integrity impact. The vulnerability does not require user interaction or privileges, increasing its risk in local attack scenarios.

The vulnerability is fixed in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. Users and administrators should apply these updates to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.