CVEvulnerability
CVE-2024-44228
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-276
Description
This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data.
Affected configurations
• apple xcode (< 16.0)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://support.apple.com/en-us/121239 Vendor Advisory