CVE-2024-36287lowCWE-693

Bypass of TCC restrictions on macOS

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.8epss 0.2%

exploitation probability

0.2%top 91% of all CVEs

observed exploitation

nono source reports it

Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

References