A race condition in macOS allows an application to break out of its sandbox, potentially giving the app unauthorized access to the system. The flaw stems from a concurrency issue classified as CWE‑362. Once an app escapes the sandbox, it could read or alter files, misconfigure system settings, or launch additional malicious processes, thereby compromising confidentiality, integrity, and availability of the affected machine.

Apple macOS is affected. The vulnerability applies to versions prior to macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.1. All earlier releases of these macOS lines are potentially vulnerable.

The CVSS score of 7.8 indicates a high severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the race condition likely requires a local attacker or an application with a pre‑existing code execution vector to trigger the sandbox escape.