CVE-2024-44228

HIGH

Xcode < 16 - Unprotected User Data Exposure via Permission Inheritance

Title source: llm
STIX 2.1

Description

This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0018
EPSS Percentile 39.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-276
Status published
Products (2)
Apple/Xcode < 16
apple/xcode < 16.0
Published Oct 28, 2024
Tracked Since Feb 18, 2026