CVE-2024-44132

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox.
References
Link Resource
https://support.apple.com/en-us/121238 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

12 Dec 2024, 15:07

Type Values Removed Values Added
References () https://support.apple.com/en-us/121238 - () https://support.apple.com/en-us/121238 - Vendor Advisory
First Time Apple macos
Apple
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
CWE CWE-59
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

17 Sep 2024, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-17 00:15

Updated : 2024-12-12 15:07


NVD link : CVE-2024-44132

Mitre link : CVE-2024-44132


JSON object : View

Products Affected

apple

  • macos
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')