CVE-2024-23233

EPSS 0.04%
Published 08.03.2024 02:15:47
Last modified 29.03.2025 00:15:18
Source product-security@apple.com
Teams watchlist Login
Open Login

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ macOS Version >= 14.0 < 14.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.114

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-277 Insecure Inherited Permissions

A product defines a set of insecure permissions that are inherited by objects that are created by the program.

http://seclists.org/fulldisclosure/2024/Mar/21

Mailing List

https://support.apple.com/en-us/HT214084

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-23233

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-23233

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-23233

EUVD