Sandbox Escape Vulnerability in Apple Products
CVE-2024-54514

8.6HIGH

Key Information:

Vendor

Apple
Status
TV OS
Mac OS
Watch OS
iOS And iPad OS
Vendor
CVE Published:
12 December 2024

What is CVE-2024-54514?

A vulnerability has been identified in Apple software that could allow an application to break out of its designated sandbox environment. This security flaw was addressed through enhancements in checks within the affected software versions. Users are encouraged to update their devices promptly to the latest versions of watchOS, tvOS, macOS, iOS, and iPadOS to mitigate any potential security risks associated with this vulnerability. Apple has implemented fixes in versions including watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, iPadOS 18.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iOS and iPadOS < 18.2

macOS < 15.2

macOS < 13.7

References

https://support.apple.com/en-us/121844
https://support.apple.com/en-us/121839
https://support.apple.com/en-us/121842

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.