An injection flaw was detected in macOS that, if exploited, could allow an application to acquire root privileges. The defect was resolved with tighter input validation in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. The weakness is identified as CWE‑88, covering command or privilege escalation errors. This vulnerability could enable an attacker who can provide crafted input to a vulnerable component to obtain elevated privileges, effectively bypassing the system’s privilege boundaries.

The vulnerability affects Apple’s macOS products. Versions earlier than macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 are vulnerable, while those releases and later provide the fix.

The CVSS score of 7.8 designates a high‑severity threat. The EPSS score is reported as below 1 %, indicating a very low but non‑zero likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector is local; an application that can inject malicious input into the affected component may trigger the flaw and gain root privileges. Because elevated privileges can be obtained, the impact on confidentiality, integrity, and availability is potentially complete system compromise if the attacker controls a privileged process.