Apple Symlink Validation Vulnerability in macOS

A vulnerability exists in the Login Window component of macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3, allowing a malicious application to create symbolic links to protected areas of the disk. This issue arises from inadequate validation of symlinks, which could potentially be exploited to access or modify sensitive system files.

Impact

Exploitation of this vulnerability could lead to unauthorized access or modification of protected regions on the disk, allowing malicious applications to interfere with critical system files or user data.