The vulnerability permits unredacted user contact details to be written to system logs when a conversation in the Messages app is deleted. These logs can be accessed by privileged or potentially by compromised local users, resulting in an accidental disclosure of personal data. This is a confidentiality breach highlighted by CWE-200.

Apple macOS is the affected platform. The fix is implemented in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. Users running earlier releases remain vulnerable.

The CVSS score of 9.8 indicates severe impact, while the EPSS score of less than 1% suggests active exploitation is unlikely at this time. The vulnerability is not included in the CISA KEV catalog, implying no known widespread exploitation. Attackers would need local or elevated access to read the system logs; remote exploitation is not indicated by the available data. Based on the description, it is inferred that the attack vector is local access to system logs, as no remote exploitation pathway is mentioned.