A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.4. An app may be able to gain elevated privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Accessibility | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Accounts | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Associateddomains | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Contacts | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Corelocation | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Cups | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Dcerpc | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Desktopservices | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Facegallery | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Geoservices | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Iosurface | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Iosurfaceaccelerator | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Libxml2 | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Libxpc | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Mallocstacklogging | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Metal | — | — | Oct 14, 2024 | Jul 29, 2024 |
| Apple Osx Mobilestoragemounter | — | Upgrade macOS to the latest version | Jul 17, 2024 | Jul 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub