A flaw in macOS sensitive‑information redaction can allow an attacker to view user information on a locked device. The weakness, classified as CWE‑359, permits exposure of data that should be hidden when a device is locked. If exploited, the attacker could access personal details or confidential content presented during user interactions.

Apple macOS systems are affected, including any version prior to macOS Sequoia 15.6, macOS Sonoma 14.7.7, or macOS Ventura 13.7.7. The vulnerability is present in all builds of macOS that do not contain the improved redaction fix released in these versions.

The CVSS score of 4.6 indicates low to moderate severity, and the EPSS score of <1% suggests the exploit is unlikely to be automated or widely used. The issue is not listed in CISA's KEV catalog. The likely attack vector is physical access; an attacker who can physically reach a device that is locked may leverage this weakness to view sensitive data visible on the lock screen or through recent activity. No remote exploitation is described, so the risk is tied to proximity to the device.