{"id":"CVE-2024-44133","aliases":["EUVD-2024-40891","GHSA-jpf3-j9x5-w3ff"],"status":"published","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15...","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15. On MDM managed devices, an app may be able to bypass certain Privacy preferences.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.07737,"percentile":0.94699,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2024-09-16T23:23:11Z","modified":"2026-06-17T07:52:22Z","exploits":[{"source":"pocgithub","id":"yo-yo-yo-jbo/hm-surf","title":"yo-yo-yo-jbo/hm-surf","date":"2024-01-23","url":"https://github.com/yo-yo-yo-jbo/hm-surf"}],"products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/121238","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Sep/33"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44133"},{"url":"https://github.com/advisories/GHSA-jpf3-j9x5-w3ff"}],"sources":{"cve":[{"id":"CVE-2024-44133","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15. On MDM managed devices, an app may be able to bypass certain Privacy preferences.","status":"published","published":"2024-09-16T23:23:11.932Z","modified":"2026-04-02T18:23:21.682Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:06.48311Z"}],"euvd":[{"id":"EUVD-2024-40891","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15. On MDM managed devices, an app may be able to bypass certain Privacy preferences.","status":"published","published":"2024-09-16T23:23:11Z","modified":"2026-04-02T18:23:21Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:18.206649Z"}],"ghsa":[{"id":"GHSA-jpf3-j9x5-w3ff","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15...","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15. On MDM managed devices, an app may be able to bypass certain Privacy preferences.","status":"published","published":"2024-09-17T00:31:05Z","modified":"2025-11-04T18:31:22Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:04:33.911399Z"}],"nvd":[{"id":"CVE-2024-44133","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15. On MDM managed devices, an app may be able to bypass certain Privacy preferences.","status":"published","published":"2024-09-17T00:15:50.3Z","modified":"2026-06-17T07:52:22.29Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:10:26.717759Z"}]}}