Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-44107 State: PUBLISHED Published: 2024-09-10T20:47:26.779Z Last Updated: 2025-06-12T17:03:29.008Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Workspace Control Problem Types: CWE-427 Description: DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC
CVE ID: CVE-2024-44112 State: PUBLISHED Published: 2024-09-10T04:03:08.115Z Last Updated: 2024-09-10T13:24:25.562Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP for Oil & Gas Problem Types: CWE-862 Description: Due to missing authorization check in SAP for Oil & Gas (Transportation and Distribution), an attacker authenticated as a non-administrative user could call a remote-enabled function which will allow them to delete non-sensitive entries in a user data table. There is no effect on confidentiality or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3505293 - https://url.sap/sa
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3505293 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-44113 State: PUBLISHED Published: 2024-09-10T03:04:28.683Z Last Updated: 2024-09-10T13:27:59.898Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP Business Warehouse (BEx Analyzer) Problem Types: CWE-359, CWE-862 Description: Due to missing authorization checks, SAP Business Warehouse (BEx Analyzer) allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/34819
lity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3481992 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-44114 State: PUBLISHED Published: 2024-09-10T03:06:18.174Z Last Updated: 2024-09-10T13:27:50.746Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver Application Server for ABAP and ABAP Platform Problem Types: CWE-863 Description: SAP NetWeaver Application Server for ABAP and ABAP Platform allow users with high privileges to execute a program that reveals data over the network. This results in a minimal impact on confidentiality of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3507252 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-44115 State: PUBLISHED Published: 2024-09-10T03:08:43.205Z Last Updated: 2024-09-16T16:16:14.697Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver Application Server for ABAP and ABAP Platform Problem Types: CWE-862 Description: The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces, and nodes. There is low impact on integrity of the application Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3488039 - ht
f the application Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3488039 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-44116 State: PUBLISHED Published: 2024-09-10T03:11:05.878Z Last Updated: 2024-09-10T13:27:43.993Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver Application Server for ABAP and ABAP Platform Problem Types: CWE-862 Description: The RFC enabled function module allows a low privileged user to add any workbook to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces. There is low impact on integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3488039 - http
he application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3488039 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-44117 State: PUBLISHED Published: 2024-09-10T04:25:27.127Z Last Updated: 2024-09-10T13:21:46.673Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SAP_SE Products: SAP NetWeaver Application Server for ABAP and ABAP Platform Problem Types: CWE-862 Description: The RFC enabled function module allows a low privileged user to perform various actions, such as modifying the URLs of any user's favourite nodes and workbook ID. There is low impact on integrity and availability of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3488039 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-44120 State: PUBLISHED Published: 2024-09-10T04:26:46.558Z Last Updated: 2024-09-10T13:21:19.086Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver Enterprise Portal Problem Types: CWE-79 Description: SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site scripting due to insufficient encoding of user-controlled input. An unauthenticated attacker could craft a malicious URL and trick a user to click it. If the victim clicks on this crafted URL before it times out, then the attacker could read and manipulate user content in the browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
r could read and manipulate user content in the browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3498221 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-44121 State: PUBLISHED Published: 2024-09-10T04:28:07.353Z Last Updated: 2024-09-10T13:20:58.919Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP S/4 HANA (Statutory Reports) Problem Types: CWE-213 Description: Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherwise be restricted. The vulnerability could expose internal user data that should remain confidential. It does not impact the integrity and availability of the application Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3437585 - https:
e application Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3437585 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-44122 State: PUBLISHED Published: 2024-10-28T21:08:21.087Z Last Updated: 2025-11-03T22:07:23.486Z Vendors: Apple Products: macOS Problem Types: An application may be able to break out of its sandbox Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1. An application may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121570 - https://support.apple.com/en-us/121568
CVE ID: CVE-2024-44123 State: PUBLISHED Published: 2024-10-28T21:08:18.661Z Last Updated: 2024-12-06T19:00:53.840Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: A malicious app with root privileges may be able to access keyboard input and location information without user consent Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may be able to access keyboard input and location information without user consent. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/1212
es: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-44124 State: PUBLISHED Published: 2024-09-16T23:23:24.789Z Last Updated: 2025-11-04T16:13:47.532Z Vendors: Apple Products: iOS and iPadOS Problem Types: A malicious Bluetooth input device may bypass pairing Description: This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A malicious Bluetooth input device may bypass pairing. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-44125 State: PUBLISHED Published: 2024-09-16T23:23:12.769Z Last Updated: 2025-11-04T16:13:49.475Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to leak sensitive user information Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. A malicious application may be able to leak sensitive user information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121247
CVE ID: CVE-2024-44126 State: PUBLISHED Published: 2024-10-28T21:07:57.026Z Last Updated: 2025-11-03T22:07:24.949Z Vendors: Apple Products: macOS, visionOS, iOS and iPadOS Problem Types: Processing a maliciously crafted file may lead to heap corruption Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, iOS 17.7 and iPadOS 17.7, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. Processing a maliciously crafted file may lead to heap corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121249 - https:/
ogram Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121249 - https://support.apple.com/en-us/121568 - https://support.apple.com/en-us/121246 - https://support.apple.com/en-us/121250 - https://support.apple.com/en-us/121247
CVE ID: CVE-2024-44127 State: PUBLISHED Published: 2024-09-16T23:22:08.898Z Last Updated: 2025-11-04T16:13:51.349Z Vendors: Apple Products: iOS and iPadOS Problem Types: Private Browsing tabs may be accessed without authentication Description: This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121246 - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-44128 State: PUBLISHED Published: 2024-09-16T23:23:19.791Z Last Updated: 2025-11-04T16:13:54.168Z Vendors: Apple Products: macOS Problem Types: An Automator Quick Action workflow may be able to bypass Gatekeeper Description: This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An Automator Quick Action workflow may be able to bypass Gatekeeper. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121234 - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121247
CVE ID: CVE-2024-44129 State: PUBLISHED Published: 2024-09-16T23:23:17.086Z Last Updated: 2025-11-04T16:13:56.027Z Vendors: Apple Products: macOS Problem Types: An app may be able to leak sensitive user information Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, macOS Sequoia 15. An app may be able to leak sensitive user information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121234 - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44130 State: PUBLISHED Published: 2024-09-16T23:22:26.983Z Last Updated: 2025-11-04T16:13:56.964Z Vendors: Apple Products: macOS Problem Types: An app with root privileges may be able to access private information Description: This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15. An app with root privileges may be able to access private information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44131 State: PUBLISHED Published: 2024-09-16T23:22:09.818Z Last Updated: 2025-11-04T16:13:58.816Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: An app may be able to access sensitive user data Description: This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-44132 State: PUBLISHED Published: 2024-09-16T23:23:25.727Z Last Updated: 2025-11-04T16:13:59.767Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44133 State: PUBLISHED Published: 2024-09-16T23:23:11.932Z Last Updated: 2025-11-04T16:14:00.717Z Vendors: Apple Products: macOS Problem Types: On MDM managed devices, an app may be able to bypass certain Privacy preferences Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15. On MDM managed devices, an app may be able to bypass certain Privacy preferences. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44134 State: PUBLISHED Published: 2024-09-16T23:23:05.839Z Last Updated: 2025-11-04T16:14:01.831Z Vendors: Apple Products: macOS Problem Types: An app may be able to read sensitive location information Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44135 State: PUBLISHED Published: 2024-09-16T23:23:03.101Z Last Updated: 2025-11-04T16:14:03.849Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected files within an App Sandbox container Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access protected files within an App Sandbox container. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121247
CVE ID: CVE-2024-44136 State: PUBLISHED Published: 2025-01-15T19:35:56.404Z Last Updated: 2025-03-22T13:33:18.032Z Vendors: Apple Products: iOS and iPadOS Problem Types: An attacker with physical access to a device may be able to disable Stolen Device Protection Description: This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to a device may be able to disable Stolen Device Protection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120905
CVE ID: CVE-2024-44137 State: PUBLISHED Published: 2024-10-28T21:08:03.955Z Last Updated: 2025-11-03T22:07:27.881Z Vendors: Apple Products: macOS Problem Types: An attacker with physical access may be able to share items from the lock screen Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1. An attacker with physical access may be able to share items from the lock screen. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121570 - https://support.apple.com/en-us/121568
CVE ID: CVE-2024-44139 State: PUBLISHED Published: 2024-09-16T23:22:54.549Z Last Updated: 2025-11-04T16:14:04.809Z Vendors: Apple Products: iOS and iPadOS Problem Types: An attacker with physical access may be able to access contacts from the lock screen Description: The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-44141 State: PUBLISHED Published: 2024-10-24T16:40:43.098Z Last Updated: 2024-10-24T18:11:54.591Z Vendors: Apple Products: macOS Problem Types: A person with physical access to an unlocked Mac may be able to gain root code execution Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to an unlocked Mac may be able to gain root code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120911
CVE ID: CVE-2024-44142 State: PUBLISHED Published: 2025-01-30T18:49:12.899Z Last Updated: 2025-02-02T10:02:30.954Z Vendors: Apple Products: GarageBand Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121866
CVE ID: CVE-2024-44144 State: PUBLISHED Published: 2024-10-28T21:08:31.771Z Last Updated: 2025-11-03T22:07:30.795Z Vendors: Apple Products: macOS, tvOS, iOS and iPadOS, visionOS, watchOS Problem Types: Processing a maliciously crafted file may lead to unexpected app termination Description: A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, watchOS 11, visionOS 2, iOS 18 and iPadOS 18. Processing a maliciously crafted file may lead to unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-u
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121570 - https://support.apple.com/en-us/121248 - https://support.apple.com/en-us/121567 - https://support.apple.com/en-us/121249 - https://support.apple.com/en-us/121250 - https://support.apple.com/en-us/121240
CVE ID: CVE-2024-44145 State: PUBLISHED Published: 2024-10-28T21:08:37.764Z Last Updated: 2024-10-29T19:55:04.028Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen Description: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-44146 State: PUBLISHED Published: 2024-09-16T23:22:15.412Z Last Updated: 2025-11-04T16:14:05.759Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44147 State: PUBLISHED Published: 2024-09-16T23:22:20.996Z Last Updated: 2025-11-04T16:14:06.715Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may gain unauthorized access to Local Network Description: This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An app may gain unauthorized access to Local Network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121250
CVE ID: CVE-2024-44148 State: PUBLISHED Published: 2024-09-16T23:23:10.031Z Last Updated: 2025-11-04T16:14:07.663Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44149 State: PUBLISHED Published: 2024-09-16T23:23:28.377Z Last Updated: 2025-11-04T16:14:08.624Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected user data Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44151 State: PUBLISHED Published: 2024-09-16T23:22:19.091Z Last Updated: 2025-11-04T16:14:11.461Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121234 - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121247
CVE ID: CVE-2024-44152 State: PUBLISHED Published: 2024-09-16T23:23:14.462Z Last Updated: 2025-11-04T16:14:12.396Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-44153 State: PUBLISHED Published: 2024-09-16T23:23:23.145Z Last Updated: 2025-11-04T16:14:14.322Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121247