CVE-2024-23245

3.3 lowEPSS 0.4%

Low (3.3) in apple macos. EPSS 0.4% chance of exploitation in the next 30 days.

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
Published: 2024-03-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:macos

References

https://support.apple.com/en-us/120884
https://support.apple.com/en-us/120886
https://support.apple.com/en-us/120895
http://seclists.org/fulldisclosure/2024/Mar/21
http://seclists.org/fulldisclosure/2024/Mar/22

Check your stack JSON