Apple macOS Privilege Escalation Vulnerability in AccountPolicy Component

A vulnerability allowing a malicious application to gain root privileges has been identified in the AccountPolicy component of Apple macOS. This issue affects multiple versions of macOS, including Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The vulnerability was introduced by a logic error in the handling of directory paths, which could be exploited by applications to escalate privileges.

Impact

Exploitation of this vulnerability allows a malicious app to gain root privileges, potentially leading to unauthorized access and modification of system files and settings.

Remediation

Users can update to macOS Ventura 13.7.5, macOS Sequoia 15.4, or macOS Sonoma 14.7.5 to address this vulnerability.