CVE-2024-44205 Information

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8 macOS Monterey 12.7.6 iOS 16.7.9 and iPadOS 16.7.9 iOS 17.6 and iPadOS 17.6 macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system logs.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Reference

https://support.apple.com/en-us/120910 https://support.apple.com/en-us/120911 https://support.apple.com/en-us/120908 https://support.apple.com/en-us/120912 https://support.apple.com/en-us/120909

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

5.5