OS X update for App Support (CVE-2024-44255)

OS X update for App Support (CVE-2024-44255)

Severity

7

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

10/28/2024

Created

11/01/2024

Added

10/31/2024

Modified

01/28/2025

Description

A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent.

Solution(s)

• apple-osx-upgrade-13_7_1
• apple-osx-upgrade-14_7_1
• apple-osx-upgrade-15_1

References

• https://attackerkb.com/topics/cve-2024-44255
• CVE - 2024-44255
• https://support.apple.com/en-us/121564
• https://support.apple.com/en-us/121568
• https://support.apple.com/en-us/121570