A logic flaw in macOS permits an application to read user‑sensitive data that it should not be able to access; the weakness is categorized as CWE‑285 (authorization failure). The issue originates from insufficient checks in system logic and is mitigated only after an app triggers the vulnerable code. Apple stated that the flaw was fixed in macOS Sonoma 14.8, so earlier releases lack the necessary safeguards.

All macOS devices running versions prior to macOS Sonoma 14.8 are affected. The vulnerability is present in any Apple macOS installation that has not yet applied the 14.8 security update, regardless of configuration or region.

The CVSS score of 5.5 indicates moderate severity. An EPSS score of less than 1% suggests a low likelihood that the flaw will be exploited in the wild. The vulnerability is not listed in the CISA KEV catalog. Attackers would need to deliver a malicious or compromised application capable of exercising the logic flaw, making the primary attack vector an application‑level exploitation.