Technical impact
The vulnerability is a race condition in macOS that can allow a sandboxed application to escape its sandbox and access protected resources. It results from a timing-related flaw that was corrected by adding additional validation logic in the operating system.
Affected Systems
Apple macOS versions before 15.7.5 (Sequoia), 14.8.5 (Sonoma), and 26.4 (Tahoe) are affected. Devices running earlier releases of these macOS lines can run a sandboxed application that may exploit the race condition.
Risk and Exploitability
The CVSS score of 8.1 indicates high severity. An EPSS score of less than 1 % suggests a low likelihood of widespread exploitation, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack path requires inducing a race condition within a sandboxed application, which may involve manipulating the timing of operations; this is inferred from the nature of a race condition but is not directly confirmed by the provided data. Because of the need for precise timing, exploitation is considered to have moderate difficulty.
