CVE-2024-23232 is a privacy issue in macOS that could allow an application to capture the user's screen by exploiting inadequate handling of temporary files. Apple fixed this vulnerability in macOS Sonoma 14.4 by improving the management of temporary files to prevent unauthorized screen capture. The vulnerability is classified under CWE-922 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The CVSS v3.1 base score is 3.3 (Low), with attack vector local, low attack complexity, no privileges required, user interaction required, scope unchanged, and confidentiality impact low. No known exploits have been reported. The vendor advisory explicitly states that the issue is fixed in macOS Sonoma 14.4.

An unprivileged app with user interaction may be able to capture screen content, potentially leading to limited confidentiality loss of user data displayed on the screen. The impact is considered low severity due to the requirement of local access and user interaction, and the limited confidentiality impact. There are no reports of exploitation in the wild.

Apply the official fix by updating macOS to version Sonoma 14.4 or later. This update includes improved handling of temporary files that addresses the vulnerability. No additional mitigation steps are required as the issue is resolved by this update.