CVE-2024-54498

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to break out of its sandbox.

Affected

Apple · macOS

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

1.12% chance of exploitation in the next 30 days, 66th percentile

Published

2024-12-11

Updated

2026-04-02

Proof-of-concept exploits (1)

• wh1te4ever/CVE-2024-54498-PoC65★ · 2025-06-28

Security advisories

• https://support.apple.com/en-us/121839
• https://support.apple.com/en-us/121840
• https://support.apple.com/en-us/121842

References

• CVE Record
• NVD entry

Related

• CVE-2020-9802
• CVE-2025-31258