The flaw lies in how macOS handles temporary files during the print preview process. A document is written to a temporary file, and if the file is not properly protected or cleaned up, an attacker could read it, exposing potentially sensitive information. This weakness leads to an information disclosure vulnerability.

Apple’s macOS versions released before macOS Tahoe 26.4 are affected. The issue was addressed in macOS Tahoe 26.4 and later releases.

The overall severity is low, with a CVSS score of 3.3 and an EPSS score of less than 1%, indicating a very small likelihood of exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Based on the description, the attack vector is inferred to be local; an attacker would need the ability to trigger a print preview on the target machine. No public exploits have been reported, so the risk remains modest.