CVE-2024-44255

CVSS 8.4 HIGHEPSS 0.3%CWE-22

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.4EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 out 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A malicious app may be able to run arbitrary shortcuts without user consent.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Apple · iOS and iPadOS Apple · macOS Apple · tvOS Apple · visionOS Apple · watchOS

Referências

http://seclists.org/fulldisclosure/2024/Oct/11 http://seclists.org/fulldisclosure/2024/Oct/12 http://seclists.org/fulldisclosure/2024/Oct/13 http://seclists.org/fulldisclosure/2024/Oct/15 http://seclists.org/fulldisclosure/2024/Oct/16 http://seclists.org/fulldisclosure/2024/Oct/9 https://support.apple.com/en-us/121563 https://support.apple.com/en-us/121564 https://support.apple.com/en-us/121565 https://support.apple.com/en-us/121566 https://support.apple.com/en-us/121568 https://support.apple.com/en-us/121569