CVE-2024-23224: Infoleak
Published Jan 22, 2024
·Updated
Finder. The issue was addressed with improved checks.
Credit
Brian McNulty
Affected Software
4 affected componentsFixes available
Apple macOS<14.3
14.3
macOS Ventura<13.6.4
13.6.4
macOS>=13.0<13.6.4
macOS>=14.0<14.3
Event History
Jan 23, 2024
CVE Published
via MITRE·12:25 AM
Data Sourced
via MITRE·12:25 AM
DescriptionWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23224?
CVE-2024-23224 is classified as a medium severity vulnerability that may allow an app to access sensitive user data.
2
How do I fix CVE-2024-23224?
To fix CVE-2024-23224, update your system to macOS Sonoma version 14.3 or macOS Ventura version 13.6.4.
3
What software is affected by CVE-2024-23224?
CVE-2024-23224 affects macOS versions 13.0 to 13.6.4 and versions 14.0 to 14.2.
4
What type of vulnerability is CVE-2024-23224?
CVE-2024-23224 is a vulnerability related to improper access controls that can lead to unauthorized access to user data.
5
Is there a patch for CVE-2024-23224?
Yes, a patch for CVE-2024-23224 is included in macOS updates 14.3 and 13.6.4.