CVE-2024-44175

Oct. 29, 2024, 2:34 p.m.

Tags

product-security@apple.com
2024-10-28
CVE-2024-44175

Product(s) Impacted

macOS

  • Sonoma 14.7.1
  • Sequoia 15

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data.

Weaknesses

Date

Published: Oct. 28, 2024, 9:15 p.m.

Last Modified: Oct. 29, 2024, 2:34 p.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@apple.com

References

https://support.apple.com/en-us/121238
product-security@apple.com
https://support.apple.com/en-us/121570
product-security@apple.com