{"id":"CVE-2024-23230","aliases":["EUVD-2024-20749","GHSA-8g69-6rgj-v638"],"status":"published","title":"This issue was addressed with improved file handling. This issue is fixed in macOS Sonoma 14.4,...","description":"This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0021,"percentile":0.11287,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2024-03-08T01:35:39Z","modified":"2026-06-17T07:12:21Z","products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/120884"},{"url":"https://support.apple.com/en-us/120886"},{"url":"https://support.apple.com/en-us/120895"},{"url":"https://support.apple.com/en-us/HT214083","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT214085","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT214084","tags":["x_transferred","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/21","tags":["x_transferred","Mailing List"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/22","tags":["x_transferred","Mailing List"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/23","tags":["x_transferred","Mailing List"]},{"url":"https://support.apple.com/kb/HT214085"},{"url":"https://support.apple.com/kb/HT214084"},{"url":"https://support.apple.com/kb/HT214083"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23230"},{"url":"https://github.com/advisories/GHSA-8g69-6rgj-v638"}],"sources":{"cve":[{"id":"CVE-2024-23230","description":"This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data.","status":"published","published":"2024-03-08T01:35:39.177Z","modified":"2026-04-02T18:15:38.42Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:34:05.077718Z"}],"euvd":[{"id":"EUVD-2024-20749","description":"This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data.","status":"published","published":"2024-03-08T01:35:39Z","modified":"2026-04-02T18:15:38Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:20.345501Z"}],"ghsa":[{"id":"GHSA-8g69-6rgj-v638","title":"This issue was addressed with improved file handling. This issue is fixed in macOS Sonoma 14.4,...","description":"This issue was addressed with improved file handling. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data.","status":"published","published":"2024-03-08T03:31:24Z","modified":"2026-04-02T21:32:40Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:07:06.607954Z"}],"nvd":[{"id":"CVE-2024-23230","description":"This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data.","status":"published","published":"2024-03-08T02:15:47.733Z","modified":"2026-06-17T07:12:21.287Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:09:39.488031Z"}]}}