CVE-2024-23244 | BDVDB-2026-226895 Detail
ApplemacOS
Description#
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4. An app from a standard user account may be able to escalate privilege after admin user login.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
No weakness recorded in the source data.
References#
- https://support.apple.com/en-us/120884
- https://support.apple.com/en-us/120895
- https://support.apple.com/en-us/HT214083
- https://support.apple.com/en-us/HT214084
- http://seclists.org/fulldisclosure/2024/Mar/21
- http://seclists.org/fulldisclosure/2024/Mar/23
- https://support.apple.com/kb/HT214084
- https://support.apple.com/kb/HT214083
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.