OS X update for WindowServer (CVE-2024-44257)

OS X update for WindowServer (CVE-2024-44257)

Severity

5

CVSS

(AV:L/AC:M/Au:N/C:C/I:N/A:N)

Published

10/28/2024

Created

11/01/2024

Added

10/31/2024

Modified

01/28/2025

Description

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to access sensitive user data.

Solution(s)

• apple-osx-upgrade-13_7_1
• apple-osx-upgrade-14_7_1
• apple-osx-upgrade-15_1

References

• https://attackerkb.com/topics/cve-2024-44257
• CVE - 2024-44257
• https://support.apple.com/en-us/121564
• https://support.apple.com/en-us/121568
• https://support.apple.com/en-us/121570