CVE-2024-23261

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-23261
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker may be able to read information belonging to another user.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/120895
https://support.apple.com/en-us/120910
https://support.apple.com/en-us/120912
http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2024/Jul/20 Mailing List Third Party Advisory
https://support.apple.com/en-us/HT214084 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT214118 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT214120 Release Notes Vendor Advisory
https://support.apple.com/kb/HT214084 Release Notes Vendor Advisory
https://support.apple.com/kb/HT214118
https://support.apple.com/kb/HT214120
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
History

02 Apr 2026, 19:17

Type Values Removed Values Added
References
  • () https://support.apple.com/en-us/120895 -
  • () https://support.apple.com/en-us/120910 -
  • () https://support.apple.com/en-us/120912 -

04 Nov 2025, 18:15

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT214118 -
  • () https://support.apple.com/kb/HT214120 -

21 Nov 2024, 08:57

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2024/Jul/19 - Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2024/Jul/19 - Mailing List, Third Party Advisory
References () http://seclists.org/fulldisclosure/2024/Jul/20 - Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2024/Jul/20 - Mailing List, Third Party Advisory
References () https://support.apple.com/en-us/HT214084 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214084 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214118 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214118 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214120 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214120 - Release Notes, Vendor Advisory
References () https://support.apple.com/kb/HT214084 - Release Notes, Vendor Advisory () https://support.apple.com/kb/HT214084 - Release Notes, Vendor Advisory

12 Aug 2024, 15:38

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2024/Jul/19 - () http://seclists.org/fulldisclosure/2024/Jul/19 - Mailing List, Third Party Advisory
References () http://seclists.org/fulldisclosure/2024/Jul/20 - () http://seclists.org/fulldisclosure/2024/Jul/20 - Mailing List, Third Party Advisory
References () https://support.apple.com/en-us/HT214084 - () https://support.apple.com/en-us/HT214084 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214118 - () https://support.apple.com/en-us/HT214118 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214120 - () https://support.apple.com/en-us/HT214120 - Release Notes, Vendor Advisory
References () https://support.apple.com/kb/HT214084 - () https://support.apple.com/kb/HT214084 - Release Notes, Vendor Advisory
CWE NVD-CWE-noinfo
First Time Apple
Apple macos
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

30 Jul 2024, 13:32

Type Values Removed Values Added
Summary
  • (es) Se abordó una cuestión de lógica con una mejor gestión estatal. Este problema se solucionó en macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. Un atacante puede ser capaz de leer información que pertenece a otro usuario.

30 Jul 2024, 02:15

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2024/Jul/19 -

30 Jul 2024, 01:15

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2024/Jul/20 -
  • () https://support.apple.com/kb/HT214084 -

29 Jul 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-29 23:15

Updated : 2026-04-02 19:17

NVD link : CVE-2024-23261

Mitre link : CVE-2024-23261

CVE.ORG link : CVE-2024-23261

JSON object : View

Products Affected

apple

  • macos
CWE
NVD-CWE-noinfo