Apple macOS Sequoia LaunchServices Physical Access Vulnerability Allowing Keyboard Input to Locked Apps

A vulnerability in the LaunchServices component of Apple macOS Sequoia has been identified, allowing an attacker with physical access to a device to send keyboard inputs to applications running on a locked screen. This issue arises from a race condition that could be exploited to manipulate app behavior without user consent.

Impact

Exploitation of this vulnerability could lead to unauthorized interaction with apps, potentially allowing for the manipulation of app data or functions.

Remediation

Users can update to macOS Sequoia 15.1 to address this vulnerability.