A privacy flaw involving inadequate handling of temporary files may allow an application to capture the user’s screen. The weakness is classified as an access control problem, meaning an application can obtain data it should not normally be able to see. The consequences include disclosure of sensitive visual information displayed on the screen and potential compromise of user privacy.

Apple macOS is affected. The issue is fixed in macOS Sequoia 15.7.4 and macOS Tahoe 26.3, so earlier releases of these major versions are at risk. No other vendors or products are listed.

The vulnerability has a CVSS score of 7.5, indicating high severity, and an EPSS score of less than 1%, suggesting a low likelihood of active exploitation at present. It does not appear in the CISA KEV catalog. Because control over temporary files typically requires local access, the likely attack vector is a local attacker who can run or manipulate applications on the compromised machine. No additional exploit conditions are described in the available data.