Apple Products Path Handling Vulnerability Allowing Sandbox Escape

A path handling vulnerability that could allow an application to break out of its sandbox has been identified in multiple Apple products, including iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and visionOS 26.4. The vulnerability arises from inadequate validation of directory paths, which could be exploited to manipulate app sandboxing restrictions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to resources or data outside of the app's designated sandbox, potentially allowing for malicious activities or data breaches.