VulnerabilityModified

CVE-2024-44292

A privacy issue was addressed with improved private data redaction for log entries.

MEDIUM 5.5EPSS 0.19%

Does this matter?

Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS: 0.19% probability · 9th percentile
CISA KEV: Not listed
Weakness: CWE-922
Affected: apple/macos
Source: product-security@apple.com

References

https://support.apple.com/en-us/121564Vendor Advisory
http://seclists.org/fulldisclosure/2024/Oct/11

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.