HIGH CWE-94
CVE-2024-54529
Apple macOS vulnerability
Apple·macOS
7.8/ 10
CVSS 3.1
High severity
0.33%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 27% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list, but a public proof of concept exists.
Timeline
- Published
- Dec 11, 2024
- Updated
- Nov 4, 2026
- First covered
- Jun 29, 2026
- Latest story
- 5 months ago
Summary
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CWE-94Improper Control of Generation of Code ('Code Injection')
Attack profile
Attack vectorLocal
ComplexityLow
PrivilegesNone
User interactionRequired
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HAffected products
- Apple macOSbefore 13.7.2before 14.7.2before 15.2