GCVE-110-NCSC-2024-381

Weaknesses (CWE)

CWE-122Heap-based Buffer OverflowCWE-377Insecure Temporary FileCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-404Improper Resource Shutdown or ReleaseCWE-275-CWE-284Improper Access ControlCWE-942Permissive Cross-domain Policy with Untrusted DomainsCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-285Improper AuthorizationCWE-190Integer Overflow or WraparoundCWE-208Observable Timing DiscrepancyCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-415Double FreeCWE-61UNIX Symbolic Link (Symlink) FollowingCWE-265-

Risk Scores

CVSS 3.1

5.5/10

Medium · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
apple	macos_sonoma__14.7	—	—
apple	macos_sequoia__15	—	—
apple	macos_ventura__13.7	—	—

Aliases

CVE-2023-4504 CVE-2023-5841 CVE-2024-23237 CVE-2024-27795 CVE-2024-27858 CVE-2024-27860 CVE-2024-27861 CVE-2024-27869 CVE-2024-27875 CVE-2024-27876 CVE-2024-27880 CVE-2024-27886 CVE-2024-39894 CVE-2024-40770 CVE-2024-40791 CVE-2024-40797 CVE-2024-40801 CVE-2024-40814 CVE-2024-40825 CVE-2024-40826 CVE-2024-40831 CVE-2024-40837 CVE-2024-40838 CVE-2024-40841 CVE-2024-40842 CVE-2024-40843 CVE-2024-40844 CVE-2024-40845 CVE-2024-40846 CVE-2024-40847 CVE-2024-40848 CVE-2024-40850 CVE-2024-40856 CVE-2024-40857 CVE-2024-40859 CVE-2024-40860 CVE-2024-40861 CVE-2024-40866 CVE-2024-41957 CVE-2024-44125 CVE-2024-44128 CVE-2024-44129 CVE-2024-44130 CVE-2024-44131 CVE-2024-44132 CVE-2024-44133 CVE-2024-44134 CVE-2024-44135 CVE-2024-44146 CVE-2024-44148 CVE-2024-44149 CVE-2024-44151 CVE-2024-44152 CVE-2024-44153 CVE-2024-44154 CVE-2024-44158 CVE-2024-44160 CVE-2024-44161 CVE-2024-44163 CVE-2024-44164 CVE-2024-44165 CVE-2024-44166 CVE-2024-44167 CVE-2024-44168 CVE-2024-44169 CVE-2024-44170 CVE-2024-44176 CVE-2024-44177 CVE-2024-44178 CVE-2024-44181 CVE-2024-44182 CVE-2024-44183 CVE-2024-44184 CVE-2024-44186 CVE-2024-44187 CVE-2024-44188 CVE-2024-44189 CVE-2024-44190 CVE-2024-44191 CVE-2024-44198

References

advisory