The host is installed with Apple Mac OS 14 before 14.4 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle issues in improved state management. On successful exploitation, photos in the hidden photos album may be viewed without authentication.