A logic flaw in the sandbox enforcement can allow a malicious or compromised application to break out of its confined environment, thereby gaining unauthorized access to system resources and data. The vulnerability is a missing security check issue, classified as CWE-693, and can lead to elevated privileges that compromise system integrity.

Apple iOS, iPadOS, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and watchOS 26.3 are all affected. The issue has been resolved starting with iOS 26.3, iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and watchOS 26.3.

The CVSS score of 8.8 marks this as a high‑severity vulnerability, while the EPSS score of less than 1% indicates that exploitation attempts are currently rare. The attacker would need a malicious or vulnerable application to be run on the device, and based on the description it is inferred that the attack vector is local. Because the vulnerability enables privilege escalation, the potential impact on confidentiality, integrity, and availability is substantial, necessitating urgent remediation.