CVE-2024-23261
CVE-2024-23261
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
29 Jul 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker may be able to read information belonging to another user.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Apple · macOSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://seclists.org/fulldisclosure/2024/Jul/19http://seclists.org/fulldisclosure/2024/Jul/20https://support.apple.com/en-us/120895https://support.apple.com/en-us/120910https://support.apple.com/en-us/120912https://support.apple.com/en-us/HT214084https://support.apple.com/en-us/HT214118https://support.apple.com/en-us/HT214120https://support.apple.com/kb/HT214084https://support.apple.com/kb/HT214118https://support.apple.com/kb/HT214120