← back
CVE-2024-23216mediumCWE-22

CVE-2024-23216

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.7epss 0.3%
exploitation probability
0.3%top 82% of all CVEs
observed exploitation
nono source reports it
A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to overwrite arbitrary files.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Apple · macOS
References
http://seclists.org/fulldisclosure/2024/Mar/21http://seclists.org/fulldisclosure/2024/Mar/22http://seclists.org/fulldisclosure/2024/Mar/23https://support.apple.com/en-us/120884https://support.apple.com/en-us/120886https://support.apple.com/en-us/120895https://support.apple.com/en-us/HT214083https://support.apple.com/en-us/HT214084https://support.apple.com/en-us/HT214085https://support.apple.com/kb/HT214083https://support.apple.com/kb/HT214084https://support.apple.com/kb/HT214085