Apple Mail Permissions Vulnerability Allowing Sandbox Bypass

A permissions vulnerability in the Mail app on macOS Ventura, Sequoia, and Sonoma was addressed with additional sandbox restrictions. This issue could allow an app to access sensitive user data or break out of its sandbox. Notably, the 'Block All Remote Content' feature may not be effective for all mail previews.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user data or allow an app to escape its sandboxed environment, potentially leading to further exploitation.

Remediation

Users can update to macOS Ventura 13.7.5, macOS Sequoia 15.4, or macOS Sonoma 14.7.5 to address this vulnerability.