Keychain item disclosure via flawed permissions logic

Improper permission preservation in SoftwareUpdate in Apple macOS allows local users to read a user's Keychain items through a malicious app. Apple identifies only flawed permissions logic and has not disclosed the specific permission object or incorrect operation within SoftwareUpdate. Execution of the malicious app and user interaction are required; the documented consequence is limited to disclosure of Keychain items.