CVEvulnerability
CVE-2024-23261
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker may be able to read information belonging to another user.
Affected configurations
• apple macos (< 12.7.6)
• apple macos (>= 13.0 < 13.6.8)
• apple macos (>= 14.0 < 14.4)
References
- https://support.apple.com/en-us/120895 support.apple.com
- https://support.apple.com/en-us/120910 support.apple.com
- https://support.apple.com/en-us/120912 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/20 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214084 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214118 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214120 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214084 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214118 support.apple.com
- https://support.apple.com/kb/HT214120 support.apple.com