Improper handling of system caches allows an application to read protected user data. This creates a risk of confidential information being exposed to apps that should not have such access, potentially leaking personal or sensitive data. The weakness maps to information exposure, as it directly lets a process discover data stored in caches that are intended to be protected.

Apple macOS environments are impacted, specifically versions of the macOS Tahoe release before the 26.2 update. The fix was introduced in macOS Tahoe 26.2, so any earlier Tahoe builds are vulnerable. No other Apple operating systems were explicitly listed as affected in the available data.

The CVSS score of 5 indicates a moderate severity vulnerability, while the EPSS score of less than 1% suggests a low probability of exploitation in the near term. The vulnerability is not currently documented in the CISA KEV catalog. The likely attack scenario involves a compromised or malicious application accessing the cache to retrieve protected data; no explicit remote exploit path is described, so the threat is most pronounced in local or privileged contexts.