VulnerabilityModified
CVE-2024-44190
An app may be able to read arbitrary files.
MEDIUM 5.5EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read arbitrary files.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.25% probability · 16th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/121234Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121238Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121247Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Sep/33
- http://seclists.org/fulldisclosure/2024/Sep/40
- http://seclists.org/fulldisclosure/2024/Sep/41
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.