CVE-2024-44211

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-44211
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/121564 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:15.0:*:*:*:*:*:*:*
History

06 Jan 2025, 13:58

Type Values Removed Values Added
First Time Apple macos
Apple
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 5.5
Summary
  • (es) Este problema se solucionó con una validación mejorada de los enlaces simbólicos. Este problema se solucionó en macOS Sequoia 15.1. Una aplicación puede tener acceso a datos confidenciales del usuario.
References () https://support.apple.com/en-us/121564 - () https://support.apple.com/en-us/121564 - Vendor Advisory
CPE cpe:2.3:o:apple:macos:15.0:*:*:*:*:*:*:*
CWE CWE-59

20 Dec 2024, 17:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CWE CWE-281

20 Dec 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-20 04:15

Updated : 2025-01-06 13:58

NVD link : CVE-2024-44211

Mitre link : CVE-2024-44211

CVE.ORG link : CVE-2024-44211

JSON object : View

Products Affected

apple

  • macos
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')

CWE-281

Improper Preservation of Permissions