MacOS "DirtyNIB" Vulnerability

## Executive summary This blog post details a macOS vulnerability (termed “DirtyNIB”) where modified NIB/XIB files in application bundles can be used to execute AppleScript and hijack application entitlements (e.g., Photos and Microphone) after Gatekeeper verification. The author provides PoCs against Pages and CarPlay Simulator, explains mitigations introduced in Ventura and Sonoma and workarounds, and states they reported the issue to Apple without a satisfactory resolution.