Physical Access Vulnerability in Apple macOS Sequoia Products

CVE-2024-44286

What is CVE-2024-44286?

A security issue exists within Apple's macOS Sequoia products where an attacker with physical access to a locked device can input keyboard events to running applications. This vulnerability highlights the importance of securing devices, even when they appear to be locked, as it can allow unauthorized access to sensitive information or functionalities within installed applications. The issue has been addressed in macOS Sequoia version 15.1 with improvements in state management to mitigate this risk.

References