CVE-2024-23269
MEDIUM | Platform: macOS | Changelog
CVE Details
Description
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to modify protected parts of the file system.
CVSS 3.1 Score
| Metric | Value |
|---|---|
| Base Score | 5.5 (MEDIUM) |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
References
- Apple Security Advisory
- NVD Entry
- https://support.apple.com/en-us/120886
- https://support.apple.com/en-us/120895
- http://seclists.org/fulldisclosure/2024/Mar/21 (Mailing List)
- http://seclists.org/fulldisclosure/2024/Mar/22 (Mailing List)
- http://seclists.org/fulldisclosure/2024/Mar/23 (Mailing List)
- https://support.apple.com/en-us/HT214083 (Vendor Advisory)
- https://support.apple.com/en-us/HT214084 (Vendor Advisory)