Description (CNA)
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to access user-sensitive data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / macOS | affected 0 before 14.8.8; affected 0 before 26.6; affected 0 before 26.7 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/128067
- https://support.apple.com/en-us/128072
- https://support.apple.com/en-us/149042
ADP enrichment
Publicly available proof-of-concept exploit code demonstrates that this vulnerability can be exploited by a remote, unauthenticated attacker to read artibrary files. The author of the PoC also states that an attacker can write files not protected by SIP and that TCC can be bypassed.