Apple LaunchServices AirPlay Vulnerability Allowing JAR File to Bypass Gatekeeper Checks

A vulnerability in the LaunchServices component of macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5 allows a malicious JAR file to bypass Gatekeeper checks. This issue was addressed with improved handling of executable types. Additionally, in the AirPlay component, a similar vulnerability exists where an attacker on the local network can cause a denial-of-service or leak sensitive user information, which has also been patched.

Impact

Exploitation of this vulnerability can lead to a bypass of Gatekeeper checks, allowing malicious JAR files to be executed without proper security validations.

Remediation

Users can update to macOS Ventura 13.7.5, macOS Sequoia 15.4, or macOS Sonoma 14.7.5 to address this vulnerability.