Sensitive Location Information Exposure in Apple macOS Products
CVE-2024-54519

5.5MEDIUM

Key Information:

Vendor
Apple
Status
Mac OS
Vendor
CVE Published:
27 January 2025

Summary

A security vulnerability has been identified in Apple macOS products that could allow an application to access sensitive location information without appropriate user consent. This issue, which affects versions such as macOS Sonoma 14.7.2 and macOS Sequoia 15.2, has been addressed through enhanced sanitization measures in logging processes. Users are encouraged to update their systems to mitigate potential risks related to unauthorized information exposure.

Affected Version(s)

macOS < 15.2

macOS < 14.7

References

https://support.apple.com/en-us/121839
https://support.apple.com/en-us/121840

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.