CVE-2024-23276

HIGH | Platform: macOS | Changelog

CVE Details

Description

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to elevate privileges.

CVSS 3.1 Score

Metric	Value
Base Score	7.8 (HIGH)
Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Weakness

CWE-269

References

Apple Security Advisory
NVD Entry
https://support.apple.com/en-us/120886
https://support.apple.com/en-us/120895
http://seclists.org/fulldisclosure/2024/Mar/21 (Mailing List)
http://seclists.org/fulldisclosure/2024/Mar/22 (Mailing List)
http://seclists.org/fulldisclosure/2024/Mar/23 (Mailing List)
https://support.apple.com/en-us/HT214083 (Vendor Advisory)
https://support.apple.com/en-us/HT214084 (Vendor Advisory)