An application may be able to read kernel memory, potentially exposing system secrets such as passwords, cryptographic keys, or other confidential data. The vulnerability was mitigated by removing the problematic code; prior to the fix, an attacker could capture sensitive information, leading to further compromise or data exfiltration.

Apple macOS is affected, specifically versions that precede the release of macOS Golden Gate 27 where the vulnerable code was removed. The fix is included in macOS Golden Gate 27.

The EPSS score is less than 1% and the vulnerability is not listed in CISA KEV. The CVSS score is 5.5, indicating medium severity. The attack appears to be local, requiring that a malicious or compromised application runs on the target to read kernel memory. Therefore, the risk is primarily to users running potentially untrusted software rather than remote attackers.