CVE-2024-44270

Опубликовано: 28 окт. 2024

Источник: nvd

CVSS3: 8.6

CVSS3: 7.5

EPSS Низкий

Описание

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions.

Ссылки

https://support.apple.com/en-us/121568
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121570
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Oct/11
http://seclists.org/fulldisclosure/2024/Oct/12
http://seclists.org/fulldisclosure/2024/Oct/13

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7.1 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7.1 (исключая)

EPSS

Процентиль: 31%

0.0012

Низкий

8.6 High

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-863

Связанные уязвимости

GHSA-3vrp-8p8h-29r9

CVSS3: 7.5

github

больше 1 года назад

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions.

EPSS

Процентиль: 31%

0.0012

Низкий

8.6 High

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-863