This vulnerability permits a local application to escape its sandbox and execute arbitrary code with elevated privileges due to improper state management. The flaw enables the app to bypass sandbox restrictions, thereby risking unauthorized code execution and potential exploitation of system resources.

Apple macOS systems prior to macOS Sequoia 15.3, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7 are affected. The defect is fixed in those releases, and any earlier macOS versions without the update remain vulnerable.

The CVSS score of 7.8 indicates high severity, while an EPSS score of < 1% suggests a low likelihood of exploitation in the wild. The vulnerability is not listed in CISA KEV. Based on the description, the attack vector appears to be local, exploiting an application that can be run by a user or privileged process; the path to privilege escalation is clear once the unpatched system runs the vulnerable app.