Pedro José Pereira Vieito

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.4 **Description** The issue allows an app to potentially break out of its sandbox. This was addressed by adding additional logic. **Recommendations** For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 **Description** A permissions issue was addressed with additional restrictions. This issue may allow an app to access protected user data. The issue is related to a sandboxed app bypassing TCC protections. **Recommendations** For macOS Sonoma versions prior to 14.7, update to macOS Sonoma 14.7 to resolve the issue. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** OpenAI ChatGPT app versions prior to 2024-07-05 for macOS **Description** The issue concerns the OpenAI ChatGPT app for macOS, which opts out of the sandbox and stores conversations in cleartext in a location accessible to other apps. This could potentially allow unauthorized access to sensitive information. **Recommendations** For versions prior to 2024-07-05, update the OpenAI ChatGPT app to a version that includes the necessary security fixes to address the issue of storing conversations in cleartext and opting out of the sandbox. As a temporary workaround, consider restricting access to the location where conversations are stored to minimize the risk of exploitation.