CVE-2024-44208 is a vulnerability affecting macOS versions before Sequoia 15. This flaw, identified in Apple’s operating system, allows applications to bypass certain privacy preferences due to improper state management. The vulnerability could enable unauthorized apps to access restricted information, potentially compromising user privacy. Apple addressed this issue with improved state management in macOS Sequoia 15, which effectively mitigates the vulnerability by enforcing privacy settings more rigorously.
This issue is fixed in macOS Sequoia 15.
This vulnerability has a CVSS 3.1 score of 7.5, classified as high severity, due to its low attack complexity, lack of privilege requirements, and lack of need for user interaction—making it relatively easy to exploit over a network if left unpatched.
See more details on: