A logic issue in macOS’s internal checks allows an application to locate and read sensitive user data that should not be accessible. The flaw was identified and addressed by adding stricter validation, and the vulnerability is fixed in Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. Until the update is installed, a malicious or compromised app could read protected data.

Affected are Apple macOS releases prior to the security patches: Sequoia 15.x, Sonoma 14.x, and Tahoe 26.x. The issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Systems running earlier minor or patch versions of these major releases are considered vulnerable.

The EPSS score is less than 1% and the vulnerability is not listed in the CISA KEV catalog, suggesting that known exploitation activity is low. The flaw can be leveraged by a malicious application or a local attacker to retrieve protected data. The attack vector is most likely local; remote exploitation would require additional conditions that are not documented. While no active exploits are documented, the vulnerability represents a medium risk until mitigated. The CVSS score of 5.5 indicates medium severity, and this rating combined with the low EPSS confirms the moderate potential impact.