CVE-2024-23233

EPSS 0.04%
Veröffentlicht 08.03.2024 02:15:47
Zuletzt bearbeitet 29.03.2025 00:15:18
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ macOS Version >= 14.0 < 14.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.114

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-277 Insecure Inherited Permissions

A product defines a set of insecure permissions that are inherited by objects that are created by the program.

http://seclists.org/fulldisclosure/2024/Mar/21

Mailing List

https://support.apple.com/en-us/HT214084

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-23233

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-23233

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-23233

EUVD