A privacy flaw in Apple macOS allows an application to read or otherwise expose user‑sensitive information. The vulnerability stems from vulnerable code paths that were removed during remediation, but the damage is a privacy breach that can leak data the user expects to remain confidential. This represents an information exposure weakness, aligned with CWE‑200.

Apple macOS is affected, specifically macOS Sequoia 15.4 and 15.5, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. The flaw can be triggered by any application that was able to use the vulnerable code in these releases.

The CVSS score of 5.5 indicates a moderate risk, and the EPSS score of less than 1% suggests a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Access to protected data appears to be possible via local application code; the attacker would need to run or install software that can exploit the available code paths, making the threat vector likely local or application‑based.