CVE-2024-23224 | BDVDB-2026-222841 Detail
ApplemacOS
Description#
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS Ventura 13.6.4. An app may be able to access sensitive user data.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References#
- https://support.apple.com/en-us/120307
- https://support.apple.com/en-us/120309
- https://support.apple.com/en-us/HT214058
- https://support.apple.com/en-us/HT214061
- http://seclists.org/fulldisclosure/2024/Jan/36
- http://seclists.org/fulldisclosure/2024/Jan/37
- https://support.apple.com/kb/HT214061
- https://support.apple.com/kb/HT214058
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.