A flaw in file system access controls allows an unprivileged application to write to protected parts of the file system. This violation of filesystem integrity can enable an attacker to alter or replace system files, potentially compromising the correctness and reliability of the operating system.

The vulnerability affects Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Devices running versions prior to the patched releases—iOS 18.4, iPadOS 18.4 and 17.7.6, macOS Sequoia 15.4, Sonoma 14.7.5, Ventura 13.7.5, tvOS 18.4, visionOS 2.4, and watchOS 11.4—are susceptible.

The CVSS score of 5.0 reflects a moderate severity assessment, and the EPSS score below 1% indicates a low likelihood of current exploitation. The vulnerability is not included in the CISA KeV catalog. Attackers would need local access to a malicious or compromised application; no remote exploitation path is described, so the threat primarily concerns users who install or run untrusted software on affected Apple platforms.