The vulnerability stems from a parsing issue in how directory paths are handled within Apple's operating systems. A malicious application can exploit this flaw to break out of its sandbox, potentially accessing or modifying protected system files and executing code outside its permitted boundaries. This is a classic path traversal weakness (CWE‑22) that compromises the confidentiality and integrity guarantees that the platform's sandboxing model provides.

Apple operating systems affected include iOS and iPadOS versions up to iOS 18.7.10, iPadOS 18.7.10, iOS 26.6, and iPadOS 26.6; macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6; and tvOS 26.6. Devices or systems still running earlier releases beyond these fixes remain vulnerable because the path validation issue remains present. The advisory lists the exact releases that include the fix.

The flaw permits sandbox escape, a high‑impact attack that requires the attacker to install a malicious application on the device. With access to the local filesystem and process space, the attacker could gain persistent, elevated privileges. The EPSS score of < 1% suggests a low probability of exploitation, and since it is not listed in the CISA KEV catalog, the primary risk assessment is based on the CVSS score of 9.3, which indicates a serious threat. Updating to the fixed versions eliminates the attack surface.