CVE-2024-23294

CVSS 7.8 HIGHEPSS 0.3%CWE-20

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 mar 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Apple · macOS

Referencias

http://seclists.org/fulldisclosure/2024/Mar/21 https://support.apple.com/en-us/120895 https://support.apple.com/en-us/HT214084 https://support.apple.com/kb/HT214084