The vulnerability allows an application to escape its sandbox confinement, enabling it to execute unauthorized operations that could compromise system integrity or confidentiality. By exploiting incorrect enforcement of sandbox boundaries, a malicious or compromised app can gain elevated privileges beyond its intended limits, potentially accessing protected files, altering system settings, or running code that bypasses security restrictions. This weakness stems from improper authorization and access control within the sandbox framework.

Apple macOS is affected, specifically all releases prior to macOS Sequoia 15.4. The flaw is mitigated in the Sequoia 15.4 update, which introduces stricter checks against unauthorized actions.

The CVSS score of 8.8 indicates a high severity vulnerability, while the EPSS score is not available. The flaw is not listed in the CISA KEV catalog, suggesting limited known exploitation to date. Nonetheless, the ability to break out of a sandbox carries significant risk because it permits privilege escalation on the host system. Likely exploitation would involve a crafted or malicious application running locally on the target machine. Even without documented exploits, organizations running legacy macOS versions should treat this as a potentially high‑impact concern and plan for timely remediation.