Apple macOS Sequoia and Sonoma User Enrollment Bypass Vulnerability in Lockdown Mode

A configuration vulnerability allowing account-driven User Enrollment to bypass Lockdown Mode has been identified in Apple macOS Sequoia 15.6 and macOS Sonoma 14.7.7. While Lockdown Mode is designed to enhance security by limiting certain functionalities, this vulnerability could still permit User Enrollment under specific conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized account-driven User Enrollment, potentially allowing users to enroll devices in a management system without proper authorization, bypassing the intended restrictions of Lockdown Mode.

Remediation

Users can update to Apple macOS Sequoia 15.6 or macOS Sonoma 14.7.7 to address this vulnerability.