The vulnerability is a flaw in the handling of temporary files on macOS, allowing an application to read or write data that should have remained private. The issue is classified as an information exposure weakness (CWE‑922). An attacker could gain access to user‑sensitive information through a malicious or compromised app that manipulates temporary file creation or access. The impact is a breach of confidentiality, exposing data that users expect to be safeguarded.

Apple’s macOS operating system, specifically versions of macOS Tahoe that precede 26.3, is affected. The flaw was addressed in the 26.3 update, so installations of 26.3 or newer are considered fixed.

The CVSS base score of 5.5 indicates a moderate severity. The EPSS score is very low (<1 %), meaning the likelihood of exploitation in the wild is currently minimal, and the flaw is not listed in the CISA KEV catalog. Based on the description, the vulnerable code is accessed locally by apps that run on the system, so the attack surface is limited to local or malicious applications. An attacker would need to influence temporary file creation or access controls to exploit the flaw, making real‑world exploitation unlikely at present.