A permissions flaw allows an application to run code outside its sandbox or with elevated system permissions, potentially enabling an attacker to execute arbitrary code on the Mac. The weakness is a privilege escalation vulnerability that can lead to unauthorized access to system resources and data, and may compromise overall device integrity.

The issue affects Apple macOS, specifically versions prior to macOS Sequoia 15.1. Devices running earlier Sequoia releases or other macOS versions have not applied the additional restrictions that resolve this permissions problem.

The CVSS score of 8.2 indicates a high severity. While the EPSS score is not provided, the vulnerability is not listed in CISA’s KEV catalog, suggesting no widespread, documented exploitation yet. The likely attack vector is local, inferred from the fact that a running application can escape its sandbox; an attacker would need to convince or compromise a user‑initiated app to exploit this weakness.