16-01-2025 19:51 via macworld.com

macOS Sequoia 15.2 includes fix for a System Integrity Protection vulnerability

Macworld
Microsoft has released details on a security vulnerability that was fixed with the macOS Sequia 15.2 update, which was released in December. The flaw could have been exploited by an attacker to bypass macOS’s System Integrity Protection (SIP), which stops unauthorized code from running.Documented as CVE-2024-44243, the vulnerability involved macOS’s Storage Kit daemon and its entitlements. According to Microsoft, Storage Kit “has many SIP bypassing capabilities”
Read more »