Technical impact
A permissions issue was addressed by removing the vulnerable code. This vulnerability allows an application to read files outside its sandbox, potentially exposing system or user data that should be inaccessible to the process.
Affected Systems
All Apple macOS releases prior to the patched versions are affected. The vulnerability is fixed in macOS Sequoia 15.7.8, macOS Sequoia 15.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and macOS Tahoe 26.7. Users must update to these or newer releases to remove the sandbox escape.
Risk and Exploitability
The CVSS score of 5.5 indicates moderate severity for an information‑disclosure vulnerability that permits local file access. The EPSS score of less than 1% suggests exploitation is unlikely at present. Because the vulnerability is not listed in CISA KEV, there is no evidence of widespread exploitation; only local execution is required. An attacker would need to run a malicious application on the victim’s macOS system; once executed, the application could read protected files that should have been invisible, leading to disclosure of sensitive personal or system data. The low EPSS and absence from KEV suggest that the risk is moderate, yet the ability to bypass sandbox restrictions still poses a notable threat if an attacker can gain local execution.
