A path handling issue caused macOS applications to lack proper validation of file paths, allowing an application to exploit this weakness and trigger a denial of service. The flaw is a file‑path traversal vulnerability identified as CWE‑22 and can cause a system or application to crash or become unresponsive.

The vulnerability affects Apple macOS across its product lines. Versions prior to macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7 are susceptible. All earlier releases of these operating systems are impacted until the fixes available in the listed updates are applied.

The CVSS score of 6.2 indicates moderate severity, while an EPSS score of less than 1% suggests a low probability of exploitation in the wild. The vulnerability is not present in the CISA KEV catalog. Attackers would need to run a malicious application on the affected system to attempt the path traversal and induce a denial of service; no remote exploitation path is described in the data.