CVE-2024-44294

A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges

Medium · published October 28, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with root privileges may be able to delete protected system files.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00846 · 57.6th percentile
Published
2024-10-28T21:08Z
EPSS history
Timeline
  • 28 OCT 21:08Z
    A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges
    cvelistv5