The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.4, macOS Ventura 13.7.6, macOS Sonoma 14.7.6. A malicious app may be able to gain root privileges.
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Macos | Apple | * | 13.7.6 (excluding) |
Macos | Apple | 14.0 (including) | 14.7.6 (excluding) |
Macos | Apple | 15.0 (including) | 15.4 (excluding) |