A race condition in macOS allows a malicious application to gain root privileges by exploiting insufficient validation when two concurrent operations modify shared state. The vulnerability enables an attacker to execute privileged commands after the race resolves, presenting a classic privilege escalation scenario anchored in race condition weaknesses.

Apple macOS is affected. The flaw exists in versions prior to macOS Sequoia 15.7 and macOS Tahoe 26; the fix is included in those releases. No specific product line beyond the OS is named, and the error originates at the system kernel level.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, yet the potential to obtain root gives it substantial theoretical impact. The CVSS score is 7, indicating high severity. Based on the description, the likely attack vector is local or requires an application capable of triggering the race; no remote exploitation has been documented. Given the severity of gaining root, the risk is high until the update is applied, though the lack of an exploit estimate makes the likelihood uncertain.