The vulnerability occurs in the use of shared memory by the operating system that could allow a malicious app to monitor the state of user interactions with an app in use in order to steal sensitive data, such as login credentials, photos, and other personal data.