The CVE description indicates a race condition in macOS state handling that can potentially allow an application to read protected user data that it should not be able to access. This inference follows from the described simultaneous manipulation of internal state leading to unintended exposure. The impact is a privacy violation that does not involve privilege escalation, allowing the compromised application to obtain data accessible to the user.

Apple macOS versions earlier than Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6 are affected because the race condition has not yet been patched. All builds of those releases remain vulnerable until updated to the specified or newer versions, which include the state‑handling fix.

The CVSS score of 4.7 indicates moderate severity, and the EPSS score of less than 1 % means exploitation is currently considered unlikely. The vulnerability is not listed in CISA’s KEV catalog. Based on the CVE description, it is inferred that an attacker would need to execute or coerce a local application to trigger the race condition; no additional privilege escalation is required. Once the race condition is triggered, the attacker can read any data that the application can legitimately access, potentially exposing personal information.