CVE-2024-54547: An app may be able to access protected user data in Apple macOS
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data.
AI Analysis
Technical Summary
This vulnerability (CVE-2024-54547) affects Apple macOS and allows an application to potentially access protected user data due to insufficient access control checks. Apple fixed the issue by enhancing these checks in the specified macOS versions: Sequoia 15.2, Sonoma 14.7.2, and Ventura 13.7.2. The CVSS 3.1 base score is 5.5, reflecting a medium severity with a local attack vector, low attack complexity, no privileges required, and user interaction needed. The impact is confidentiality loss only, with no impact on integrity or availability.
Potential Impact
An attacker with local access and the ability to trick a user into interacting with a malicious app could gain unauthorized access to protected user data. This could lead to exposure of sensitive information. There is no indication of integrity or availability impact. No known exploits are currently reported in the wild.
Mitigation Recommendations
Apple has released official fixes for this vulnerability in macOS Sequoia 15.2, macOS Sonoma 14.7.2, and macOS Ventura 13.7.2. Users and administrators should apply these updates to remediate the issue. Since this is not a cloud service, remediation depends on patching the affected macOS versions. No additional mitigation steps are specified by the vendor.
CVE-2024-54547: An app may be able to access protected user data in Apple macOS
Description
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data.
CVSS v3.1
Score 5.5medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2024-54547) affects Apple macOS and allows an application to potentially access protected user data due to insufficient access control checks. Apple fixed the issue by enhancing these checks in the specified macOS versions: Sequoia 15.2, Sonoma 14.7.2, and Ventura 13.7.2. The CVSS 3.1 base score is 5.5, reflecting a medium severity with a local attack vector, low attack complexity, no privileges required, and user interaction needed. The impact is confidentiality loss only, with no impact on integrity or availability.
Potential Impact
An attacker with local access and the ability to trick a user into interacting with a malicious app could gain unauthorized access to protected user data. This could lead to exposure of sensitive information. There is no indication of integrity or availability impact. No known exploits are currently reported in the wild.
Mitigation Recommendations
Apple has released official fixes for this vulnerability in macOS Sequoia 15.2, macOS Sonoma 14.7.2, and macOS Ventura 13.7.2. Users and administrators should apply these updates to remediate the issue. Since this is not a cloud service, remediation depends on patching the affected macOS versions. No additional mitigation steps are specified by the vendor.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2024-12-03T22:50:35.513Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 69ceb834e6bfc5ba1df6eebf
Added to database: 04/02/2026, 18:40:52 UTC
Last enriched: 05/21/2026, 15:07:30 UTC
Last updated: 07/09/2026, 07:52:25 UTC
Views: 85
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.