Product: macOS Sequoia 15.1
Summary
This issue was addressed with improved handling of symlinks. An app may be able to access sensitive user data, which poses a risk to user privacy. The vulnerability has been fixed in the latest version of macOS Sequoia.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2024-54554 |
Exploitation
To exploit this vulnerability, an attacker with local access could create a malicious application that takes advantage of the symlink handling issue. By doing so, they could potentially access sensitive user data without proper authorization.
Affected Products
- macOS Sequoia 15.1: The latest version of macOS that addresses the symlink handling issue.
Mitigation
Users are advised to update to macOS Sequoia 15.1 to mitigate this vulnerability. Regularly updating software and monitoring for security patches can help protect against similar vulnerabilities in the future.