4.7

CVE-2024-23275

A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access protected user data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS Version >= 12.0.0 < 12.7.4
Apple ≫ macOS Version >= 13.0 < 13.6.5
Apple ≫ macOS Version >= 14.0 < 14.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.067
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List
https://support.apple.com/kb/HT214084
http://seclists.org/fulldisclosure/2024/Mar/22
Mailing List
https://support.apple.com/kb/HT214085
http://seclists.org/fulldisclosure/2024/Mar/23
Mailing List
https://support.apple.com/kb/HT214083
https://support.apple.com/en-us/HT214083
Vendor Advisory
https://support.apple.com/en-us/HT214085
Vendor Advisory
https://support.apple.com/en-us/HT214084
Vendor Advisory
https://support.apple.com/en-us/120895
https://support.apple.com/en-us/120886
https://support.apple.com/en-us/120884