This vulnerability in Apple macOS allows an application to potentially access sensitive location data because logging was not properly sanitized, leading to unintended information disclosure. The issue was addressed by Apple through sanitizing the logging mechanism to prevent leakage of location information. The fix is included in macOS Sequoia 15.2 and macOS Sonoma 14.7.2. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, impacting confidentiality but not integrity or availability.

An attacker with local access and the ability to trick a user into interaction could read sensitive location information from the system logs, potentially compromising user privacy. There is no impact on system integrity or availability. No known exploits are currently reported in the wild.

Apply the official fixes by updating macOS to Sequoia 15.2 or Sonoma 14.7.2 or later, as these versions include the sanitization of logging that resolves this vulnerability. Since the vendor advisory confirms the issue is fixed in these versions, no additional mitigation is required beyond patching.