A race condition was detected in several Apple operating systems. The flaw allows an application to read sensitive user data that it should not be able to access. The issue was addressed by adding further validation, and it is fixed in particular OS releases. The primary consequence is that a malicious or compromised app could gain visibility into protected information.

Apple iOS versions 18.7.9 and 26.5, Apple iPadOS versions 18.7.9 and 26.5, Apple macOS Sequoia 15.7.7, Apple macOS Sonoma 14.8.7, Apple macOS Tahoe 26.5, and Apple visionOS 26.5 are the affected releases. The fixes are included in the corresponding updates for each OS.

The CVSS score is 4.7, indicating moderate severity, and the EPSS score is < 1%, suggesting low exploitation probability. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector would be through a local or user‑installed application that triggers the race condition. The impact could be significant loss of confidentiality, but the low EPSS score mitigates the immediacy of threat. Nevertheless, proactive patching is advised to prevent potential exploitation of the race condition when operating system threads are not adequately synchronized.