Apple iOS EUVD-2026-60490

No special conditions are required - the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms remote unauthenticated exploitation against default configurations of iOS, iPadOS, and macOS Tahoe without any user interaction. The vulnerable code path is exposed via a network-reachable service or protocol handler active in default device state; however, Apple has not disclosed which specific service or protocol is involved, limiting defenders' ability to apply targeted service-level mitigations. Exploitation is bounded to denial-of-service (unexpected system termination) - no confidentiality or integrity impact is indicated by CVSS or advisory text. Devices running iOS/iPadOS 26.6.1+ or macOS Tahoe 26.6.2+ are not affected.

The CVSS 7.5 base score is driven entirely by availability impact (A:H) with no confidentiality or integrity loss (C:N/I:N), which accurately reflects a denial-of-service class outcome. The attack surface is maximally broad - network-reachable, low complexity, no privileges, no user interaction - making opportunistic triggering straightforward in principle. However, the absence of code execution impact, no CISA KEV listing, and no identified public proof-of-concept collectively reduce real-world urgency below that of exploitation-confirmed UAF bugs. No EPSS score was provided in source data, so probabilistic exploitation likelihood cannot be quantified. The primary operational risk is targeted or mass disruption of iOS/iPadOS endpoint availability, particularly relevant for enterprise MDM-managed fleets, kiosk deployments, and safety-critical mobile use cases. The risk is real but not critical-tier without evidence of active exploitation.

An unauthenticated remote attacker sends a specially crafted network request targeting the vulnerable memory management routine on an unpatched Apple device. The use-after-free condition corrupts heap state, causing the affected system process to crash and the device to terminate unexpectedly. No proof-of-concept exploit has been publicly identified at time of analysis, but the low-complexity network vector means exploitation does not require sophisticated tooling once the specific triggering input is understood.