CVE-2024-23229mediumCWE-922

CVE-2024-23229: falha de média gravidade em Apple macOS

Publicada em 13 mai 2024 · Atualizada em 02 abr 2026

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.3%

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.5. A malicious application may be able to access Find My data.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Produtos afetados

Apple · macOS

CVEs relacionadas — Apple macOS

No mesmo produto, das mais perigosas para as menos.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2021-30657MEDIUMCVE-2021-30657EPSS 68.5%KEV CVE-2025-43300CRITICALCVE-2025-43300EPSS 65.2%KEV CVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 51.5%KEV CVE-2021-30807HIGHCVE-2021-30807EPSS 28.8%KEV

Referências

http://seclists.org/fulldisclosure/2024/May/14 https://support.apple.com/en-us/120886 https://support.apple.com/en-us/120895 https://support.apple.com/en-us/120899 https://support.apple.com/en-us/HT214084 https://support.apple.com/en-us/HT214085 https://support.apple.com/en-us/HT214105 https://support.apple.com/kb/HT214084 https://support.apple.com/kb/HT214085 https://support.apple.com/kb/HT214105