VulnerabilityModified
CVE-2024-44181
An issue was addressed with improved handling of temporary files.
MEDIUM 5.5EPSS 0.21%
Does this matter?
Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read sensitive location information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.21% probability · 12th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/121234Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121238Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121247Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Sep/33
- http://seclists.org/fulldisclosure/2024/Sep/40
- http://seclists.org/fulldisclosure/2024/Sep/41
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.