What is CVE-2024-45599?

CVE-2024-45599 is a low-severity vulnerability in Getcursor Cursor, classified under Insecure Inherited Permissions. CVSS score: 3.8/10. Published 2024-09-25.

How severe is CVE-2024-45599?

Low severity. CVSS v3 base score is 3.8 out of 10.

Vulnerability in Getcursor Cursor

CVE-2024-45599

Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone with…

EPSS: 0.002 (7.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.8 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N.

Affected products

Getcursor Cursor — versions < 0.41.0

Weakness classification (CWE)

CWE-277 — Insecure Inherited Permissions

References

security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2024-45599?: CVE-2024-45599 is a low-severity vulnerability in Getcursor Cursor, classified under Insecure Inherited Permissions. CVSS score: 3.8/10. Published 2024-09-25.
How severe is CVE-2024-45599?: Low severity. CVSS v3 base score is 3.8 out of 10.