This vulnerability (CVE-2024-44286) affects Apple macOS and permits an attacker who has physical access to a locked device to inject keyboard input events into applications running on that device. The root cause relates to insufficient state management allowing input events despite the device being locked. Apple fixed this issue in macOS Sequoia 15.1 by improving state management to prevent unauthorized input injection when the device is locked. The CVSS v3.1 base score is 7.5, reflecting high impact on confidentiality with no impact on integrity or availability. The attack vector requires physical access, no privileges, and no user interaction.

An attacker with physical access to a locked macOS device could input keyboard events into running applications, potentially leading to unauthorized data entry or manipulation within those apps. The confidentiality impact is high as unauthorized input could expose sensitive information or trigger unintended actions. There is no impact on integrity or availability according to the CVSS vector. No known exploits are currently reported in the wild.

This vulnerability is fixed in macOS Sequoia 15.1 through improved state management. Users and administrators should update affected macOS devices to version 15.1 or later to remediate this issue. Since this is not a cloud service, patching the endpoint is required. There are no vendor advisories indicating that no action is required or that the issue is already mitigated without patching.