An application may modify protected areas of the filesystem, enabling unauthorized changes to critical system files. This flaw allows the attacker to raise the effective privileges of the application, potentially compromising system integrity and leading to further escalation.

Apple macOS is affected on releases prior to macOS Sequoia 15.3, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3. Those versions lack the improved checks that prevent modifications of protected filesystem components.

The CVSS score of 9.8 indicates a critical severity, while the EPSS score of less than 1% suggests a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is local: an application running with user privileges can exploit the flaw to alter protected filesystem parts. If an attacker can execute code with elevated privileges, the impact would be widespread due to the ability to modify protected system files.