Apple macOS is affected by an access issue that can enable a malicious or compromised application to bypass the operating system’s sandbox restrictions, potentially elevating the application’s privileges. The flaw, identified as a buffer copy without size checking (CWE-120), allows code to run outside the confines of the sandbox, enabling reading, modification, or execution of resources that the application is not authorized to access. Successful exploitation could compromise the confidentiality and integrity of the system’s data and processes and could be leveraged to further compromise the entire machine.

macOS Golden Gate 27 and macOS Tahoe 26.7, the operating systems in which the additional sandbox restrictions were implemented to address this issue, are affected. Users running versions prior to these releases do not receive the mitigation and remain vulnerable, but no specific older versions are explicitly listed as affected.

The EPSS score of less than 1 % indicates that exploitation chances are currently very low, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The attack vector requires a malicious application to run on the target device, so it is local and depends on an attacker convincing or co‑ercing a user to install compromised software. While no public exploit has yet been reported, the nature of this sandbox bypass makes vigilance prudent. The CVSS score of 8.2 reflects a high severity with full impact on confidentiality, integrity, and availability should the vulnerability be exploited.