The flaw involves inadequate access control checks that allow a malicious application to retrieve private data from an iPad or Mac. The weakness is classified as CWE-284, indicating that an attacker could read data that should be protected. The result is a disclosure of potentially sensitive information, affecting confidentiality but not necessarily integrity or availability.

Apple products running iPadOS or macOS are impacted. Versions earlier than iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5 are vulnerable. The issue has been addressed in the listed security updates.

The CVSS score of 5.5 suggests moderate severity, while an EPSS score below 1 % indicates a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The attack vector, inferred from the description, is likely local: an adversary would need to install a malicious application—either through the App Store or by sideloading—to trigger the flaw. No network‑level exploitation is noted.