CVE-2024-44128

Summary

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An Automator Quick Action workflow may be able to bypass Gatekeeper.

Affected Software

Weaknesses

• An Automator Quick Action workflow may be able to bypass Gatekeeper

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2024/Sep/40
• http://seclists.org/fulldisclosure/2024/Sep/33
• http://seclists.org/fulldisclosure/2024/Sep/41

References

• https://support.apple.com/en-us/121234
• https://support.apple.com/en-us/121238
• https://support.apple.com/en-us/121247

• ←Previous
• Next→