A flaw in Apple’s operating systems permits an application to read sensitive user data that it should not access. The vulnerability is a data protection issue that can lead to unauthorized disclosure of personal or confidential information stored on the device, potentially compromising user privacy and enabling further exploitation of exposed data.

Apple systems that had not yet installed version 26.5 of iOS, iPadOS, macOS (Tahoe), or visionOS are vulnerable. The issue is corrected in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5, so all earlier releases remain susceptible.

The exploitability details are not quantified; EPSS score is < 1% and the vulnerability is not listed in CISA KEV. The flaw allows a malicious or compromised application to read protected user data, indicating a moderate risk for confidentiality loss. The CVSS score of 5.5 confirms the vulnerability is of moderate severity. The attack vector is inferred to be local or via inter‑app cooperation depending on sandbox boundaries, with no indication that remote exploitation is required.