A malicious application can read private information on a macOS system because the operating system performs insufficient checks before allowing such access. The flaw does not permit arbitrary code execution; it merely enables an attacker to discover confidential data that the system or its applications normally protect. The CVSS score of 5.5 reflects a moderate severity, highlighting a noteworthy privacy risk but not an exploit that results in full system compromise.

Apple macOS is affected, with the vulnerability present in all releases older than macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. Devices running any earlier version of these macOS lines are susceptible to exploitation via a malicious app that attempts to read private data.

The flaw is exploitable only locally, requiring the attacker to install a malicious application on the target machine. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, which suggests fewer active exploits at present. Nevertheless, the potential for private data leakage represents a significant privacy threat, particularly on systems that have not yet applied the security updates. The moderate CVSS score indicates that while the attack does not lead to system takeover, it still poses a realistic risk of sensitive information exposure.