
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2024-23279 is a privacy vulnerability discovered in macOS Sonoma that affects the MediaRemote component. The vulnerability was fixed in macOS Sonoma 14.4, released on March 7, 2024. The issue allows an app to potentially access user-sensitive data through log entries (Apple Advisory, NVD).
The vulnerability stems from a privacy issue in the MediaRemote component of macOS Sonoma where log entries could contain sensitive user data. The issue was addressed by implementing improved private data redaction for log entries. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating local access is required and user interaction is needed (NVD).
If exploited, the vulnerability could allow a malicious application to access user-sensitive data through log entries, potentially compromising user privacy (Apple Advisory).
The vulnerability requires local access and user interaction to be exploited. There are no public reports of this vulnerability being actively exploited in the wild (NVD).
Apple has addressed this vulnerability in macOS Sonoma 14.4. Users are advised to update their systems to this version or later to protect against this security issue. The fix implements improved private data redaction for log entries (Apple Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."