An access issue in macOS was mitigated by adding sandbox restrictions. The vulnerability allows an application to read user‑sensitive data that it should not see. The weakness corresponds to CWE‑200, Information Exposure, and could result in unintended data disclosure to a malicious or non‑privileged app.

Apple macOS is affected. Versions prior to the fixes in macOS Sequoia 15.4 and macOS Sonoma 14.7.5 are vulnerable. All earlier releases of these macOS lines have the exposure until the listed patches are applied.

The CVSS score of 5.5 indicates a moderate impact. The EPSS score of less than 1 % suggests that attacks are unlikely currently, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is not explicitly disclosed in the available data; it is inferred to be a local app privilege scenario where a malicious or compromised application can access data because sandbox restrictions were insufficient.