Описание
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 14.7.1 (исключая)
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 36%
0.00153
Низкий
5.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-59
CWE-922
Связанные уязвимости
CVSS3: 5.5
github
больше 1 года назад
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data.
EPSS
Процентиль: 36%
0.00153
Низкий
5.5 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-59
CWE-922