vulnerability

OS X update for PackageKit (CVE-2024-44294)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:M/C:N/I:C/A:C)

Published

Oct 28, 2024

Added

Oct 31, 2024

Modified

Apr 6, 2026

Description

A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with root privileges may be able to delete protected system files.

Solutions

apple-osx-upgrade-13_7_1apple-osx-upgrade-14_7_1apple-osx-upgrade-15_1

References

CVE-2024-44294
https://attackerkb.com/topics/CVE-2024-44294
EUVD-EUVD-2024-41003
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-41003
https://support.apple.com/en-us/121564
https://support.apple.com/en-us/121568
https://support.apple.com/en-us/121570

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report