A permissions defect allows an application to run code outside its sandbox or with elevated privileges. This flaw can be exploited to acquire higher-level access than intended, potentially compromising data confidentiality and system integrity. The weakness is categorized as an improper restriction of operations.

Apple macOS systems are affected. The issue is resolved in macOS Sequoia 15.1; earlier releases may remain vulnerable.

The CVSS score of 8.2 signals a high severity, while an EPSS value below 1% indicates a low probability of a widespread public exploit. The vulnerability is not listed in the CISA KEV catalog, further suggesting limited active exploitation. Attackers would likely need local access to install or execute a malicious app or take advantage of a sandboxed application, making the threat scenario more aligned with local or insider attacks rather than remote exposure.