{"id":"CVE-2024-44135","state":"PUBLISHED","title":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected files within an A","description":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected files within an App Sandbox container.","publishedAt":"2024-09-16T23:23:03.101Z","updatedAt":"2026-04-02T18:19:42.167Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/121238","https://support.apple.com/en-us/121247","http://seclists.org/fulldisclosure/2024/Sep/40","http://seclists.org/fulldisclosure/2024/Sep/33"],"weaknesses":["CWE-276"],"ingestedAt":"2026-10-29T20:07:47.831Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/44xxx/CVE-2024-44135.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-44135","state":"PUBLISHED","datePublished":"2024-09-16T23:23:03.101Z","dateUpdated":"2026-04-02T18:19:42.167Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2024-08-20T21:42:05.919Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected files within an App Sandbox container."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/121238"},{"url":"https://support.apple.com/en-us/121247"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to access protected files within an App Sandbox container"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:19:42.167Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-09-17T14:21:14.867321Z","id":"CVE-2024-44135","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-276","type":"CWE","lang":"en","description":"CWE-276 Incorrect Default Permissions"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-19T18:17:02.644Z"}},{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2024/Sep/40"},{"url":"http://seclists.org/fulldisclosure/2024/Sep/33"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-04T16:14:03.849Z"}}]}}}