A permissions flaw allows an application to access data that should be protected. The weakness stems from improper restriction of operations, with the app gaining access to user data it normally could not read. The consequence is a breach of confidentiality for sensitive personal information, potentially exposing private files or settings.

Apple macOS versions prior to macOS Tahoe 26.3 are affected. The vulnerability was fixed in the 26.3 update, so any system running an earlier patch level is vulnerable.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% suggests a very low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector involves a local or application‑level attack where a malicious or compromised app is given elevated privileges. No remote network exploitation is explicitly documented, so the risk profile centers on the presence of the vulnerable app on the system.