A permissions flaw in macOS allows applications to bypass normal access controls and read user‑protected data without proper authority. The weakness, classified as CWE‑284, compromises the confidentiality of sensitive local information even if the operating system otherwise remains secure. The vulnerability could lead to privacy breaches if an application gains inappropriate privilege or is malicious.

The flaw impacts Apple macOS across multiple releases. Any version preceding macOS Sequoia 15.7, macOS Sonoma 14.8, or macOS Tahoe 26 is vulnerable. Devices running those operating systems, regardless of user role or location, may expose protected data to applications that exploit the permissions gap.

The CVSS score of 5.5 indicates a moderate impact, and the EPSS score (<1%) suggests the vulnerability is unlikely to be widely exploited at present. Based on the description, it is inferred that the attack vector is local or remote depending on an attacker’s ability to run or inject code into the target system. It is not listed in the CISA KEV catalog, so there is no known widespread exploitation. Nonetheless, administrators should promptly apply the available updates to mitigate potential data exposure.