CVE-2024-23224

EPSS 0.05%
Published 23.01.2024 01:15:11
Last modified 02.10.2025 01:35:26
Source product-security@apple.com
Teams watchlist Login
Open Login

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS Ventura 13.6.4. An app may be able to access sensitive user data.

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ macOS Version >= 13.0 < 13.6.4

Apple ≫ macOS Version >= 14.0 < 14.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.153

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://seclists.org/fulldisclosure/2024/Jan/37

Third Party Advisory

https://support.apple.com/en-us/HT214058

Vendor Advisory

Release Notes

http://seclists.org/fulldisclosure/2024/Jan/36

Third Party Advisory

https://support.apple.com/en-us/HT214061

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2024-23224

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-23224

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-23224

EUVD