This vulnerability involves a race condition in Apple macOS that could enable an application to access sensitive user data improperly. The flaw was mitigated by implementing additional validation checks. The vulnerability is tracked as CWE-362 (Race Condition). It affects macOS versions prior to the fixed releases: Sequoia 15.4, Sonoma 14.7.5, and Ventura 13.7.5. The CVSS 3.1 base score is 4.7, indicating medium severity, with an attack vector of local (AV:L), high attack complexity (AC:H), no privileges required (PR:N), and user interaction required (UI:R). The impact is high confidentiality impact (C:H) with no integrity or availability impact.

An attacker with local access and user interaction could exploit this race condition to gain unauthorized access to sensitive user data. There is no impact on integrity or availability. The vulnerability does not require privileges but has high attack complexity, reducing the likelihood of exploitation. No known exploits are reported in the wild.

This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. Users and administrators should update to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.