Impact
An application may bypass launch constraint protections, enabling it to execute malicious code with elevated privileges. The vulnerability allows a user‑local or application‑level attacker to gain higher privileges than intended, potentially compromising system integrity and confidentiality. The weakness involves improper enforcement of launch constraints, a typical scenario for privilege escalation weaknesses.
Affected Systems
Apple macOS systems are affected, with the flaw addressed in macOS Sequoia 15.4. Versions of macOS prior to Sequoia 15.4 are potentially vulnerable although specific sub‑versions are not enumerated in the available data.
Risk and Exploitability
The CVSS score is 7.8, but the EPSS score is unavailable. The vulnerability is not listed in the CISA KEV catalog. While the exact attack vector is not explicit, based on the description it is inferred that an attacker must run or influence a local application to exploit the flaw. The risk is significant because successful exploitation would grant elevated privileges, but the likelihood of exploitation cannot be quantified without EPSS data. The vulnerability remains a notable local privilege escalation risk for affected macOS installations.
OpenCVE Enrichment