CVEvulnerability
CVE-2024-44122
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-693
Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An application may be able to break out of its sandbox.
Affected configurations
• apple macos (< 13.7.1)
• apple macos (>= 14.0 < 14.7.1)
Related
Weakness · CWE (1)
- CWE-693 Protection Mechanism Failure weakness
References
- https://support.apple.com/en-us/121238 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121250 support.apple.com
- https://support.apple.com/en-us/121568 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121570 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Oct/12 seclists.org
- http://seclists.org/fulldisclosure/2024/Oct/13 seclists.org