PT-2024-31042 · Apple · Macos Sequoia+1

Csaba Fitzl + 2 · Published 2024-10-28 · Updated 2025-01-06 · CVE-2024-44211

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.1

Description This issue was addressed with improved validation of symlinks. An app may be able to access user-sensitive data.

Recommendations For versions prior to 15.1, update to macOS Sequoia 15.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

Fix

Improper Preservation of Permissions

Link Following

Weakness Enumeration

CWE-281

CWE-59

Related Identifiers

CVE-2024-44211

Affected Products

Apple Macos

Macos Sequoia

References · 10

• https://osv.dev/vulnerability/CVE-2024-44211 · Vendor Advisory
• https://support.apple.com/en-us/121564 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44211 · Security Note
• https://t.me/cvedetector/13402 · Telegram Post
• https://t.me/cvenotify/105049 · Telegram Post
• https://twitter.com/cracbot/status/1871798080397607053 · Twitter Post
• https://twitter.com/CVEnew/status/1869964860231970948 · Twitter Post
• https://t.me/cvenotify/106388 · Telegram Post
• http://seclists.org/fulldisclosure/2024/Oct/11 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44211 · Note