A logic flaw that bypasses the operating system’s protective restrictions permits an application to read or manipulate user data that is normally safeguarded. The weakness is classified as an access control flaw (CWE‑284) and can lead to significant privacy and integrity violations if an attacker can craft or install a malicious application that leverages the broken logic.

Apple macOS users running Sequoia, Sonoma, or Tahoe versions that have not applied the latest security update are affected. The issue was addressed in Sequoia 15.7.3, Sonoma 14.8.3, and Tahoe 26.2, so any earlier releases remain vulnerable.

The CVSS score of 9.8 indicates critical severity, but the EPSS score of less than 1% suggests that exploitation, while possible, is currently rare. The vulnerability is not listed in the CISA KEV catalog, and the likely implementation path would involve a local attacker installing or executing a malicious application that takes advantage of the logic flaw to access protected data.