CVE-2024-44264

medium

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious app may be able to create symlinks to protected regions of the disk.

References

https://support.apple.com/en-us/121570

https://support.apple.com/en-us/121568

http://seclists.org/fulldisclosure/2024/Oct/13

http://seclists.org/fulldisclosure/2024/Oct/12

http://seclists.org/fulldisclosure/2024/Oct/11

Details

Source: Mitre, NVD

Published: 2024-10-28

Updated: 2025-11-03

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N