CVE Vulnerabilities

CVE-2024-54537

Published: Jan 27, 2025 | Modified: Mar 18, 2025
CVSS 3.x
8.2
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to read and write files outside of its sandbox.

Affected Software

Name Vendor Start Version End Version
Macos Apple * 13.7.2 (excluding)
Macos Apple 14.0 (including) 14.7.2 (excluding)
Macos Apple 15.0 (including) 15.2 (excluding)

References