VULNERABILITY INTELLIGENCE

CVE-2024-44156

CVSS score7.1 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-10-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to bypass Privacy preferences.

Weakness classification

  • CWE-862: Missing Authorization

Primary references