CVE-2024-54504: 
macOS vulnerability analysis and mitigation

CVE-2024-54504 is a privacy vulnerability discovered in macOS Sequoia affecting versions prior to 15.2. The vulnerability was disclosed on December 11, 2024, and allows an app to potentially access user-sensitive data through log entries. The issue specifically affects the Notification Center component in macOS Sequoia (Apple Advisory).

The vulnerability stems from improper handling of private data in log entries within the Notification Center component. The issue has been assigned a CVSS v3.1 base score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating local access is required with low attack complexity and privileges needed (NVD).

The vulnerability allows malicious applications to access user-sensitive data through log entries that should be private. This represents a significant privacy concern as it could expose confidential user information to unauthorized applications (Apple Advisory, NVD).

The vulnerability requires local access to the system and low privileges to exploit. There are currently no reports of this vulnerability being actively exploited in the wild (CIS Advisory).

Apple has addressed this vulnerability by improving private data redaction for log entries in macOS Sequoia 15.2. Users are advised to update their systems to macOS Sequoia 15.2 or later to protect against this vulnerability (Apple Advisory).