CVE-2024-23230

MEDIUM | Platform: macOS | Changelog

CVE Details

Description

This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data.

CVSS 3.1 Score

Metric	Value
Base Score	5.5 (MEDIUM)
Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N`

Weakness

CWE-862

References

Apple Security Advisory
NVD Entry
https://support.apple.com/en-us/120886
https://support.apple.com/en-us/120895
http://seclists.org/fulldisclosure/2024/Mar/21 (Mailing List)
http://seclists.org/fulldisclosure/2024/Mar/22 (Mailing List)
http://seclists.org/fulldisclosure/2024/Mar/23 (Mailing List)
https://support.apple.com/en-us/HT214083 (Vendor Advisory)
https://support.apple.com/en-us/HT214084 (Vendor Advisory)