A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVE-2024-54529
CVSS base score
7.8 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-94
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
apple macos
References
- support.apple.com Release Notes, Vendor Advisory
- support.apple.com Release Notes, Vendor Advisory
- support.apple.com Release Notes, Vendor Advisory
- seclists.org
- seclists.org