CVE-2024-23275

A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14...

4.7 Medium

A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access protected user data.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.17%Up 0.1 points since Mar 8, 2024

What each source reports

NVD Score used 4.7

A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access protected user data.

Record: CVE-2024-23275
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness: CWE-362
Updated: 2026-11-02

CVE List 4.7

A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access protected user data.

Record: CVE-2024-23275
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness: CWE-362
Updated: 2026-11-02

EUVDEUVD-2024-20794 4.7

A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access protected user data.

Record: EUVD-2024-20794
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-525f-hw88-w4m8 4.7

A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14...

A race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to access protected user data.

Record: GHSA-525f-hw88-w4m8
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Weakness: CWE-362
Updated: 2026-11-02

Affected products

apple macos

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-23275 is a medium vulnerability (CVSS 4.7) in Apple Macos, published March 8, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. No source names a fixed version.

References

Show 8 moreShow less