This vulnerability involves a permissions flaw in Apple macOS that could permit an application to access sensitive user data without proper authorization. Apple resolved the issue by implementing additional restrictions on permissions. The vulnerability is tracked as CVE-2025-43378 and affects macOS versions before Sequoia 15.7.2 and Tahoe 26.1. The CVSS v3.1 base score is 5.5, indicating medium severity, with an attack vector of local access, low complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact. No known exploits have been reported.

An attacker with local access and user interaction could exploit this permissions issue to gain unauthorized access to sensitive user data on affected macOS versions. The integrity and availability of the system are not impacted. The confidentiality impact is high, but exploitation requires local access and user interaction, limiting the attack surface.

The issue is fixed in macOS Sequoia 15.7.2 and macOS Tahoe 26.1. Users and administrators should update affected systems to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.