The vulnerability arises from insufficient redaction of private data in log entries, allowing an application to read protected user information. This privacy issue could lead to disclosure of sensitive data, compromising user confidentiality. The weakness corresponds to CWE‑532 and does not enable direct system compromise but exposes private data.

Apple macOS, including versions of macOS Sequoia, Sonoma, and Tahoe that are older than Sequoia 15.7.3, Sonoma 14.8.3, and Tahoe 26.2 – those are the releases in which the issue was fixed.

The CVSS score of 3.3 indicates low severity, and the EPSS score of less than 1% suggests a very low likelihood of exploitation. The vulnerability is not listed in CISA KEV. The likely attack vector is local, as an application could read system logs containing unredacted private data. Exploitation would require the ability to run code with sufficient privileges to access these logs, but no remote exploitation path is documented.