Lucene search

K
nvd[email protected]NVD:CVE-2024-23245
HistoryMar 08, 2024 - 2:15 a.m.

CVE-2024-23245

2024-03-0802:15:48
web.nvd.nist.gov
cve-2024-23245
macos sonoma
macos monterey
macos ventura
third-party shortcuts
automator
app events
user consent

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent.

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Related for NVD:CVE-2024-23245