CVE-2024-23238

CVSS 7.1 HIGHEPSS 0.2%CWE-284

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.1EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 mar 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Productos afectados

Apple · macOS

Referencias

http://seclists.org/fulldisclosure/2024/Mar/21 https://support.apple.com/en-us/120895 https://support.apple.com/en-us/HT214084 https://support.apple.com/kb/HT214084