CVE-2024-44264

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious app may be able to create symlinks to protected regions of the disk.

Reserved 2024-08-20 | Published 2024-10-28 | Updated 2024-10-30 | Assigner apple

Problem types

A malicious app may be able to create symlinks to protected regions of the disk

Product status

Any version before 14.7
affected

Any version before 13.7
affected

References

support.apple.com/en-us/121570

support.apple.com/en-us/121568

cve.org (CVE-2024-44264)

nvd.nist.gov (CVE-2024-44264)

Download JSON