Vulnerability in Apple Macos
CVE-2024-44148
This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox.
EPSS: 0.007 (48.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Apple Macos — versions 0
References
- product-security@apple.com (Release Notes)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2024-44148?
- CVE-2024-44148 is a critical-severity vulnerability in Apple Macos. CVSS score: 10.0/10. Published 2024-09-17.
- How severe is CVE-2024-44148?
- Critical severity. CVSS v3 base score is 10.0 out of 10.