The vulnerability is an authorization issue that allows a third‑party application to read sensitive user data that should normally be protected. Apple identified that improved state management was required to fix the flaw, and the problem is resolved in macOS Golden Gate 27.

The affected platform is Apple macOS, specifically any installation earlier than macOS Golden Gate 27. Devices running those versions may allow applications to gain privileged access to user data.

EPSS score is <1% and the vulnerability is not listed in the CISA KEV catalog, so exploitation probability remains low. The flaw permits unauthorized data access, which poses a confidentiality risk. The CVSS score of 5.5 indicates moderate severity. The likely attack vector is any user‑installed application that can run with the user's permissions; based on the description, it is inferred that an attacker could craft or modify an application to exploit the issue, though no public exploit evidence is currently reported.