This vulnerability in macOS allows an application to bypass sandbox restrictions and access files outside its designated sandbox environment. Apple resolved the issue by implementing additional entitlement checks to enforce sandbox boundaries. The fix is included in macOS Sequoia 15.2, Sonoma 14.7.2, and Ventura 13.7.2. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, impacting confidentiality and integrity with high severity.

An attacker who can run a malicious app locally and convince a user to interact with it could read and modify files outside the app's sandbox. This could lead to unauthorized access to sensitive data and unauthorized modification of files, compromising system confidentiality and integrity. Availability is not impacted. No known exploits are reported in the wild.

Apply the official Apple patches by updating to macOS Sequoia 15.2, Sonoma 14.7.2, or Ventura 13.7.2 or later. These updates include the necessary entitlement checks to prevent sandbox escape. No additional mitigation is required beyond applying these official fixes.