Vulnerability · Published Sep 16, 2024 · Assigned by apple

CVE-2024-44133

Medium 5.5

In plain English

A medium-severity security flaw in macOS from Apple. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.7% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)7.7%top 5.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15. On MDM managed devices, an app may be able to bypass certain Privacy preferences.

Affected products (as reported)

VendorProductVersions
Apple macOS 0 – before 15

References