This vulnerability in Apple macOS allows a specially crafted ZIP archive to bypass Gatekeeper, the system's security feature that enforces code signing and verifies downloaded files. The underlying issue is a file quarantine bypass, which Apple addressed by implementing additional checks in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. The CVSS score is 5.5 (medium), reflecting that the attack vector requires local access with user interaction and results in integrity impact without affecting confidentiality or availability. No official remediation level or patch links are provided in the source, but the vendor advisory states the issue is fixed in the specified macOS versions.

The vulnerability allows an attacker to bypass Gatekeeper protections via a crafted ZIP archive, potentially enabling execution of untrusted or malicious code. This impacts the integrity of the system by circumventing security checks. There is no direct impact on confidentiality or availability. No known exploits have been reported in the wild.

The vulnerability is fixed in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. Users and administrators should update affected macOS systems to these or later versions to remediate the issue. Patch status is confirmed by the vendor advisory indicating these versions contain the fix. No additional mitigation actions are specified or required.