Apple released an emergency software update Tuesday to fix a critical security flaw in the screen sharing feature of Macs. Users should install the patch immediately to block potential remote code execution attacks.

What You Need to Know

The vulnerability affects the Screen Sharing component bundled with macOS. An attacker could exploit the flaw to execute arbitrary code on a target Mac without any user interaction. Apple has classified the issue as severe and urged all users to apply the patch as soon as possible. The fix is available through the standard Software Update mechanism.

Understanding the Vulnerability

Security researchers identified a memory corruption bug in the Screen Sharing daemon that could allow an unauthenticated remote attacker to gain full system control. The flaw does not require the victim to accept a screen sharing request, making it particularly dangerous for users who leave the service enabled. Apple confirmed the issue in a security bulletin dated Tuesday, noting it may have been actively exploited in targeted attacks.

The company declined to disclose additional technical details until a majority of users have updated their systems. This is a standard practice to prevent attackers from reverse engineering the patch before it reaches a wide audience.

How to Protect Your Mac

Apple has released the fix as a supplemental update to macOS Ventura, macOS Monterey and macOS Big Sur. Users can check for the update by navigating to System Settings, then General and clicking Software Update. The patch appears under the name “macOS 13.4.1” for Ventura users, with corresponding versions for older releases.

  • Enable automatic updates: Go to System Settings > General > Software Update and turn on “Automatic updates.”
  • Restart after installation: Some versions require a reboot to complete the patch.
  • Turn off Screen Sharing: If you do not use the feature, disable it in System Settings > General > Sharing.

Why This Matters

This emergency patch marks the second time in 2023 that Apple has pushed an unscheduled update to address a zero-day vulnerability in macOS. The trend underscores the growing sophistication of attackers targeting Apple’s ecosystem. For enterprise users, the screen sharing component is often left enabled for remote troubleshooting, creating a broad attack surface. Failure to update promptly could expose organizations to data breaches or ransomware deployments. Consumers, meanwhile, face risks to personal files and credentials if attackers gain remote access. The speed of Apple’s response suggests the company views this flaw as a high priority threat that warranted breaking its regular update cycle. All Mac users should treat the update as urgent and apply it without delay.