Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update :

CVE in Dock

Dock
Available for: macOS Sequoia
Impact: An app may be able to access protected user data
Description: The issue was addressed with improved checks.

CVE-2024-54547: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

CVE in System Settings

System Settings
Available for: macOS Sequoia
Impact: An app may be able to overwrite arbitrary files
Description: A path handling issue was addressed with improved validation.

CVE-2024-54520: Rodolphe BRUNETTI (@eisw0lf)

Links

• Apple Security Advisory macOS Sequoia 15.2
• Apple Security Advisory macOS Sonoma 14.7.2
• Apple Security Advisory macOS Ventura 13.7.2
• NIST entry CVE-2024-54547
• NIST entry CVE-2024-54520