A vulnerability in macOS allows a malicious application to gain root privileges. The flaw was addressed by removing the vulnerable code in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. The weakness is classified as CWE-276 and could lead to arbitrary code execution, data theft, and system compromise if exploited on a target machine.

The flaw affects all macOS releases prior to the patched versions: macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. Users running earlier macOS releases must be aware that they remain vulnerable until an update is installed.

The CVSS score of 7.8 indicates a high severity, while the EPSS of less than 1% suggests a very low probability of widespread exploitation at present. The vulnerability is not listed in CISA’s KEV catalog, indicating no known active exploitation. The likely attack vector is a malicious app that a user installs or a process that can execute compromised code on the system. Once executed, the flaw permits the attacker to assume root-level control.