CVE-2024-23261

Summary

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker may be able to read information belonging to another user.

Affected Software

Weaknesses

• An attacker may be able to read information belonging to another user

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT214120
• https://support.apple.com/en-us/HT214084
• https://support.apple.com/en-us/HT214118
• https://support.apple.com/kb/HT214084
• http://seclists.org/fulldisclosure/2024/Jul/20
• http://seclists.org/fulldisclosure/2024/Jul/19
• https://support.apple.com/kb/HT214120
• https://support.apple.com/kb/HT214118

References

• https://support.apple.com/en-us/120895
• https://support.apple.com/en-us/120910
• https://support.apple.com/en-us/120912

• ←Previous
• Next→