A flaw in entitlement handling permits an application to escape its sandbox, enabling unauthorized access to protected data or system resources, consistent with CWE‑284. This issue was addressed with improved entitlements and is fixed in iOS 18.7.2, iPadOS 18.7.2, iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, and visionOS 26.1. An app may be able to break out of its sandbox.

Apple iOS and iPadOS, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, and visionOS 26.1, as well as iOS 18.7.2 and iPadOS 18.7.2. The affected operating systems are iOS 18.7.2, iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, together with the specified macOS, tvOS, and visionOS releases.

The CVSS score of 7.8 indicates high severity, while an EPSS score of less than 1% suggests a very low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog, implying no widespread active exploitation. The likely attack vector is a local privilege escalation through a malicious or vulnerable application that mis‑uses entitlement checks; an attacker could create or modify an app to trigger the entitlement bypass and escape the sandbox. Because of the moderate exploitability and the lack of current exploitation reports, this risk is considered significant but presently unlikely to be widely deployed.