Apple QuickTime Player Sandbox Bypass Vulnerability Allowing Unauthorized File Access

A vulnerability exists in QuickTime Player on macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2, allowing applications to read and write files outside of their designated sandbox. This issue arises from insufficient entitlement checks, which could enable unauthorized access to user data.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of files, bypassing the application's sandbox restrictions.

Remediation

Users can update to macOS Sonoma 14.7.2, macOS Sequoia 15.2, or macOS Ventura 13.7.2 to address this vulnerability.