CVE-2024-23275

MEDIUM | Platform: macOS | Changelog

CVE Details

Description

A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access protected user data.

CVSS 3.1 Score

Metric	Value
Base Score	4.7 (MEDIUM)
Vector	`CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N`

Weakness

CWE-362

References

Apple Security Advisory
NVD Entry
https://support.apple.com/en-us/120886
https://support.apple.com/en-us/120895
http://seclists.org/fulldisclosure/2024/Mar/21 (Mailing List)
http://seclists.org/fulldisclosure/2024/Mar/22 (Mailing List)
http://seclists.org/fulldisclosure/2024/Mar/23 (Mailing List)
https://support.apple.com/en-us/HT214083 (Vendor Advisory)
https://support.apple.com/en-us/HT214084 (Vendor Advisory)