The vulnerability stems from insufficient privilege checks that allow an application to modify files that should be protected by the operating system. This weakness means unprivileged software could alter system files or overwrite critical configuration data, directly impacting the integrity of the platform. The flaw is a classic improper access control issue, identified by CWE‑284, which can lead to unauthorized changes and potentially enable further privilege escalation.

Apple macOS environments on versions before macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5 are affected. All prior releases lack the improved checks that were added in those updates.

The CVSS score of 6.8 indicates medium severity, and the EPSS score of less than 1% suggests a very low probability of widespread exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Attackers would most likely need to run a malicious or compromised application locally on the target machine to exploit the weakness; network‑based exploitation is not supported by the information provided.