CVE-2024-23261

high

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker may be able to read information belonging to another user.

References

https://support.apple.com/en-us/HT214118

https://support.apple.com/kb/HT214084

https://support.apple.com/en-us/HT214120

https://support.apple.com/en-us/HT214084

http://seclists.org/fulldisclosure/2024/Jul/20

http://seclists.org/fulldisclosure/2024/Jul/19

Details

Source: Mitre, NVD

Published: 2024-07-29

Updated: 2024-08-12

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N