A permissions issue in macOS allows an application to access protected user data beyond its intended scope. The vulnerability is a classic case of improper privilege escalation (CWE‑269), enabling unauthorized read access to sensitive information. The impact is the potential exposure of personal data such as documents, photos, or credentials, compromising confidentiality.

Apple macOS is affected. Systems running versions prior to macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, or macOS Tahoe 26.4 are vulnerable. These versions have been updated to include additional restrictions that resolve the permission flaw.

The CVSS score of 4 denotes low severity. EPSS is below 1 %, indicating a low likelihood of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires an application to run on the user’s machine and exploit the improper privilege check; the attack is likely local and does not rely on network connectivity. Because the flaw only allows read access, an attacker would need a malicious or compromised app installed by the user.