Apple macOS Sequoia 15 Sandbox Break via File Handling Issue
CVE-2024-44146 Published on September 17, 2024

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox.

NVD

Vulnerability Analysis

CVE-2024-44146 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Products Associated with CVE-2024-44146

Want to know whenever a new CVE is published for Apple macOS? stack.watch will email you.

Apple macOS
 

Affected Versions

Apple macOS:

Exploit Probability

EPSS
0.75%
Percentile
51.73%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.