Description
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
Affected products
apple: macos
References5
- support.apple.com/en-us/121839 Release NotesVendor Advisory
- support.apple.com/en-us/121840 Release NotesVendor Advisory
- support.apple.com/en-us/121842 Release NotesVendor Advisory
- seclists.org/fulldisclosure/2024/Dec/7
- seclists.org/fulldisclosure/2024/Dec/9
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 26 · as of 6 November 2026
- CWE
- CWE-94
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.