An authorization flaw in Apple macOS allows an installed application to capture Touch Bar content without proper entitlement checks, enabling unauthorized extraction of user interface information such as passwords or personal messages. This weakness is an access‑control issue (CWE‑862) that primarily threatens confidentiality by exposing sensitive data displayed on the Touch Bar.

Apple macOS operating systems released prior to macOS Golden Gate 27, on machines equipped with a Touch Bar display. Users running these versions of macOS are vulnerable if an application that can run locally has the opportunity to execute on the system.

The vulnerability carries a CVSS score of 5.3, indicating moderate severity, and a very low EPSS score of less than 1 %, suggesting a low likelihood of exploitation. It is not listed in the CISA KEV catalog. Exploitation would likely require local execution of a malicious or compromised application, as the flaw does not provide a remote attack vector.