The vulnerability arises from weakened validation of a caller’s access rights, allowing an application to circumvent normal access controls and read data that should be privileged. The impact is primarily the theft or exposure of personal information stored in the protected user data store.

Apple iOS, iPadOS, macOS, and visionOS are affected. The fix is included in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, and visionOS 27. The specific product versions listed are the only ones known to contain the flaw.

The flaw has no publicly reported exploit, but the EPSS score is < 1%, and it is not listed in the CISA KEV catalog. The CVSS score is 5.5, indicating a moderate severity. The vulnerability can be exploited by a local application that conforms to the required calling interface. The attack vector is inferred to be local execution within the device’s sandbox, and the potential damage is the compromise of confidential personal data. Without a public exploit, the likelihood of immediate exploitation is low, but the severity is moderate due to the value of the data that could be exposed.