CVE-2024-44255

7.8HIGH

Key Information

Vendor
Apple
Status
Mac OS
Visionos
TV OS
Watch OS
Vendor
CVE Published:
28 October 2024

Summary

A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent.

Affected Version(s)

macOS < 14.7

visionOS < 2.1

macOS < 13.7

References

https://support.apple.com/en-us/121570
https://support.apple.com/en-us/121566
https://support.apple.com/en-us/121568

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD DatabaseMitre Database
.