CVE-2024-23261

CVSS 7.5 HIGHEPSS 0.9%

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 jul 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker may be able to read information belonging to another user.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

Apple · macOS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://seclists.org/fulldisclosure/2024/Jul/19 http://seclists.org/fulldisclosure/2024/Jul/20 https://support.apple.com/en-us/120895 https://support.apple.com/en-us/120910 https://support.apple.com/en-us/120912 https://support.apple.com/en-us/HT214084 https://support.apple.com/en-us/HT214118 https://support.apple.com/en-us/HT214120 https://support.apple.com/kb/HT214084 https://support.apple.com/kb/HT214118 https://support.apple.com/kb/HT214120