exploitDog

CVE-2024-44168

Опубликовано: 17 сент. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system.

Ссылки

https://support.apple.com/en-us/121234
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121238
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121247
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/40
http://seclists.org/fulldisclosure/2024/Sep/41

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7 (исключая)

EPSS

Процентиль: 6%

0.00024

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-427

CWE-114

Связанные уязвимости

GHSA-r5fv-vx8p-jvrq

CVSS3: 5.5

github

больше 1 года назад

A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system.

EPSS

Процентиль: 6%

0.00024

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-427

CWE-114