macOS has sandboxing in the "prevent attacker from escalating from the compromised process" sense. It also has the concept of data that can only be read by app

macOS has sandboxing in the "prevent attacker from escalating from the compromised process" sense. It also has the concept of data that can only be read by apps that have the correctly rights - as in even if a process is running as root, the process cannot access the data. It sounds like someone found some way to access the history data, and because they're not supposed to be able to, there's a CVE. Of course if there was no attempt to protect the browsing history so anything/one could read it, then that would not be a vulnerability, so that's fun :-/ (as analogy: one company releases a car with a key required to open+drive, another company releases a car with no locks that anyone can get into a drive off with, and then someone finds a way to pick the lock on the former).