CVE-2024-23294

CVSS 7.8 HIGHEPSS 0.3%CWE-20

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

08 Mar 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Apple · macOS

References

http://seclists.org/fulldisclosure/2024/Mar/21 https://support.apple.com/en-us/120895 https://support.apple.com/en-us/HT214084 https://support.apple.com/kb/HT214084