The vulnerability stems from insufficient filesystem integrity checks in macOS. A local user can exploit this to modify protected areas of the system, potentially tampering with critical files, introducing malware, or escalating privileges. The weakness is classified as CWE‑269 (Improper Privilege Management).

The defect affects Apple macOS releases prior to the fixes in Sequoia 15.3, Sonoma 14.7.3, and Ventura 13.7.3. Users running earlier macOS versions have the ability to alter files protected by the operating system’s normal security controls.

The published CVSS score is 5.5, indicating moderate severity, while the EPSS score of less than 1 % reflects a very low probability that the vulnerability will be exploited in the wild. It is not included in CISA’s KEV catalog. The attack vector is local; a user who already has a normal account on the machine can exercise the fault. No network or remote code execution path is disclosed.