Eric A. Schulman

The issue allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes. This is possible due to the Login Window not preventing application launching with the VoiceOver feature.