A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A sandboxed process may be able to circumvent sandbox restrictions.
No PoCs from references.
- https://github.com/houjingyi233/macOS-iOS-system-security