A race condition was discovered in macOS that allows a malicious application to read user‑sensitive data before proper validation occurs. The flaw is identified as CWE‑362 and can lead to unintended data leakage, compromising confidentiality but not integrity or availability. The vulnerability requires local code execution and exploits a timing gap between concurrent processes that access protected information.

Apple macOS is affected, and the vulnerability exists in all releases prior to the following security updates: Sequoia 15.3, Sonoma 14.7.3, and Ventura 13.7.3. Systems running older versions are at risk.

The CVSS score of 4 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation in the wild. The flaw is not listed in the CISA KEV catalog, reducing priority for immediately critical remediation. The likely attack vector is local, requiring a process to run with user or higher privileges to trigger the race condition and gain access to sensitive data.