A critical memory-handling vulnerability across multiple Apple platforms allows for potential code execution via maliciously crafted files.

This is an input validation issue involving memory handling, which can be triggered by an unauthenticated attacker providing a maliciously crafted file to the target system.

The vulnerability carries a CVSS score of 9.1, indicating a high potential for impact, including arbitrary code execution. Successful exploitation could result in the total compromise of the affected device, loss of proprietary data, and significant operational disruption across the enterprise.

Immediate Action: Update all Apple devices (visionOS, tvOS, macOS, iOS, and iPadOS) to the specified version 18.6 or 15.6/2.6 as applicable.

Proactive Monitoring: Monitor for crashes or anomalous behavior in applications that handle external file inputs, as these may indicate attempted exploitation.

Compensating Controls: Implement robust email and web filtering to block malicious file attachments before they reach end-user devices.

Public Exploit Available: False

This vulnerability affects a wide range of Apple ecosystems and carries a high risk of exploitation. IT teams should prioritize the deployment of these updates across all mobile, desktop, and home entertainment devices to mitigate the risk of memory-based attacks.