CVE-2024-23216

HIGH | Platform: macOS | Changelog

CVE Details

Description

A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to overwrite arbitrary files.

CVSS 3.1 Score

Metric	Value
Base Score	7.1 (HIGH)
Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H`

Weakness

CWE-22

References

Apple Security Advisory
NVD Entry
https://support.apple.com/en-us/120886
https://support.apple.com/en-us/120895
http://seclists.org/fulldisclosure/2024/Mar/21 (Mailing List)
http://seclists.org/fulldisclosure/2024/Mar/22 (Mailing List)
http://seclists.org/fulldisclosure/2024/Mar/23 (Mailing List)
https://support.apple.com/en-us/HT214083 (Vendor Advisory)
https://support.apple.com/en-us/HT214084 (Vendor Advisory)