The vulnerability is a downgrade issue on Intel-based Macs that allows applications to bypass newer code‑signing restrictions. By exploiting this weakness, a malicious or compromised app could gain unauthorized access to sensitive user data. This flaw is classified as CWE‑347, a downgrade output vulnerability, meaning the system can accept a less secure version of a signature or code component.

Affected systems are Intel‑based Mac computers running macOS up to but not including the versions that contain the fix (macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1). Any earlier releases on Intel processors are potentially vulnerable. The fix is applied via updates distributed by Apple.

The CVSS score of 5.5 categorizes the vulnerability as moderate in severity, and the EPSS score of less than 1 % indicates a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers would need to run a malicious application on the target machine; the likely vector is local delivery, such as installing a rogue app or distributing compromised software that takes advantage of the downgrade in code‑signing enforcement. Because the issue stems from reduced trust in system signatures, a successful exploitation would primarily enable confidential data disclosure rather than immediate system compromise.