PT-2024-19762

CVE-2024-23268

Published

2024-03-07

Updated

2024-08-01

Description by

CVSS 3.1

8.4

High

MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.4 macOS Monterey versions prior to 12.7.4 macOS Ventura versions prior to 13.6.5

Description An injection issue was addressed with improved input validation. This issue may allow an app to elevate privileges.

Recommendations For macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue. For macOS Monterey versions prior to 12.7.4, update to macOS Monterey 12.7.4 to resolve the issue. For macOS Ventura versions prior to 13.6.5, update to macOS Ventura 13.6.5 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')