The vulnerability is a logic flaw that allows a user to elevate privileges on macOS. It is an improper authorization condition that can enable a user to perform actions at a higher privilege level than granted. The impact, as stated, is the ability for a user to gain unauthorized elevated privileges, potentially compromising system security. The weakness corresponds to improper handling of authorization (CWE-693).

Apple macOS is affected. Versions prior to macOS Sequoia 15.7.8 and prior to macOS Tahoe 26.6 are not yet patched. Users of earlier releases of these macOS versions remain vulnerable.

Because the issue allows privilege escalation, an attacker could gain root or system level access, enabling full system compromise. The CVSS score is 7.8, indicating high severity. The EPSS score is less than 1%, indicating low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation. The potential exploit requires legitimate user access to the system and the ability to trigger the logic condition, which may not be trivial. Overall, the risk remains high due to the critical nature of privilege escalation.