Apple App Intents Sandbox Escape Vulnerability

A logic vulnerability allowing a malicious app to escape its sandbox has been identified in multiple Apple operating systems, including iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. The vulnerability arises from insufficient restrictions, which could potentially be exploited by apps to access unauthorized resources or perform actions outside their intended scope.

Impact

Exploitation of this vulnerability could lead to unauthorized access to system resources or user data by allowing an app to break free from its sandboxed environment, where it is normally restricted from accessing certain system areas or user information.