CVE-2024-44148

10.0 criticalEPSS 0.7%

Critical (10.0) in apple macos. EPSS 0.7% chance of exploitation in the next 30 days.

This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox.

Severity

CVSS 3.1

10.0 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
Published: 2024-09-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:macos

References

https://support.apple.com/en-us/121238
http://seclists.org/fulldisclosure/2024/Sep/33

Check your stack JSON