A permissions issue was discovered in macOS that could allow a malicious application to escape its sandbox, potentially giving it unauthorized access to protected resources. The weakness is an improper access control flaw, analogous to CWE‑284, where the operating system fails to enforce expected permission boundaries. Such an escape can lead to loss of confidentiality, integrity, or availability for the compromised system.

The vulnerability affects macOS releases older than Sequoia 15.7.7, Sonoma 14.8.7, and Tahoe 26.5 respectively. Systems running those older releases are exposed until updated.

The exploit path requires a malicious sandboxed application that can leverage the permissions issue to break out. EPSS score is < 1% and the vulnerability is not listed in CISA KEV, yet sandbox escape constitutes a high‑risk attack vector. While no public exploit exists yet, the flaw’s nature suggests that it could be operational in advanced threat campaigns once an exploit is developed. The CVSS score is 8.8, indicating high severity, and the impact remains significant. Systems running macOS releases older than the patched releases are exposed.