The vulnerability stems from a logic error in macOS file handling that allows a malicious or compromised application to gain root privileges. The flaw occurs because file operations do not perform adequate checks, enabling the attacker to execute code with system-level permissions. This could result in full system compromise, including unauthorized data modification and control of other services.

Apple macOS is affected. Versions prior to the stated fixes—macOS Sonoma prior to 14.7.5 and macOS Ventura prior to 13.7.5—are vulnerable. Any system running an older or unpatched release remains at risk until the update is applied.

The CVSS score of 7.8 signifies a high severity issue. EPSS is listed as less than 1%, indicating a low likelihood of exploitation at this time, and the vulnerability is not in the CISA KEV catalog. The attack vector is likely local, requiring an application with sufficient local privileges to trigger the logic flaw. If such an app is present, it could elevate its privileges to root without user interaction.