The vulnerability is a race condition in macOS Sequoia's sandbox implementation. An application running on the affected system may be able to break out of its sandbox, potentially allowing it to access system resources or files outside its permitted boundaries. This flaw is identified as CWE-362.

The flaw affects Apple macOS, specifically versions before macOS Sequoia 15.1. Any installation of macOS Sequoia 15.0 or earlier is potentially vulnerable. The issue is addressed and resolved in macOS Sequoia 15.1, so systems running that or later releases are not impacted.

The CVSS score of 7.5 indicates high severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, but the lack of publicly available exploits does not mitigate the risk. Based on the description, the likely attack vector is local exploitation by an application that can trigger the race condition. Once exploited, an attacker can escape the sandbox and potentially compromise the integrity or confidentiality of the host system, jeopardizing other user data.