This vulnerability in Apple macOS allows an application to bypass sandbox restrictions and access files outside its designated sandbox environment. The issue arises from insufficient entitlement checks, which Apple has corrected in recent macOS updates. The flaw affects multiple macOS versions prior to the specified patched releases. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, impacting confidentiality and integrity with high severity.

An attacker with local access and the ability to trick a user into interacting with a malicious app could read and modify files outside the app's sandbox, potentially leading to unauthorized data access and data integrity compromise. There is no indication of availability impact or known exploitation in the wild.

Apply the official patches provided by Apple by updating to macOS Sequoia 15.2, macOS Sonoma 14.7.2, or macOS Ventura 13.7.2 or later. These updates include additional entitlement checks that resolve the vulnerability. No other mitigation steps are indicated by the vendor advisory.