VulnerabilityModified

CVE-2024-44294

A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges.

MEDIUM 6.5EPSS 0.85%

Does this matter?

Lower severity and a low EPSS score (0.85%). Track it; it rarely justifies an emergency change on its own.

Description

A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with root privileges may be able to delete protected system files.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
EPSS: 0.85% probability · 56th percentile
CISA KEV: Not listed
Affected: apple/macos
Source: product-security@apple.com

References

https://support.apple.com/en-us/121564
https://support.apple.com/en-us/121568Vendor Advisory
https://support.apple.com/en-us/121570Vendor Advisory
http://seclists.org/fulldisclosure/2024/Oct/11
http://seclists.org/fulldisclosure/2024/Oct/12
http://seclists.org/fulldisclosure/2024/Oct/13

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.