This vulnerability involves an app on macOS potentially accessing sensitive location information because logs were not properly sanitized, allowing unintended data exposure. Apple addressed the issue by improving the sanitization of logging in macOS Sequoia 15.2 and macOS Sonoma 14.7.2. The CVSS vector indicates the attack requires local access with low complexity and no privileges but does require user interaction. The impact is confidentiality loss of sensitive location data without affecting integrity or availability.

An attacker with local access and the ability to get a user to interact with the app could read sensitive location information that should have been protected. There is no impact on data integrity or system availability. No known exploits are reported in the wild.

Apply the official fixes by updating to macOS Sequoia 15.2 or macOS Sonoma 14.7.2 or later. These updates include the necessary sanitization to prevent sensitive location data leakage. No additional mitigation steps are indicated by the vendor advisory.