Keyboard Event Capture Vulnerability in macOS by Apple
CVE-2024-54539
5.5MEDIUM
Summary
A vulnerability has been identified in Apple's macOS that allows malicious applications the potential to capture keyboard events from the lock screen. This flaw raises significant security concerns, as it could enable unauthorized access to sensitive information via logged keystrokes, compromising user privacy. The issue has been addressed in the latest updates, specifically in macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2, which include improved state management to mitigate this potential risk.
Affected Version(s)
macOS < 15.2
macOS < 13.7
macOS < 14.7
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved