by Kastro
Paper/Archive/CVE-2024-44256

CVE-2024-44256

Apple macOS — The issue was addressed with improved input sanitization.

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
31
CVSS 9.3 (ADP)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 15.8.158 × 203.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to break out of its sandbox.

Affected

ProductAffectedFixed inSource
macOS< 13.7.113.7.1CNA
macOS< 14.7.114.7.1CNA
macOS< 15.115.1CNA
mac_os< 13.7.113.7.1CISA-ADP
mac_os14.0 – < 14.7.114.7.1CISA-ADP

Scores by source

CISA ADP9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.apple.com/en-us/121564refsupport.apple.com/en-us/121568refsupport.apple.com/en-us/121570refseclists.org/fulldisclosure/2024/Oct/13refseclists.org/fulldisclosure/2024/Oct/12refseclists.org/fulldisclosure/2024/Oct/11