CVE-2024-54498

HIGH

macOS <15.2-14.7.2 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-54498. PoCs published by wh1te4ever.

AI-analyzed exploit summary The repository contains only a README.md file with a brief description of a macOS Sandbox escape exploit via sharedfilelistd, but no actual exploit code or technical details are provided.

Description

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to break out of its sandbox.

Exploits (1)

nomisec STUB 63 stars
by wh1te4ever · poc
https://github.com/wh1te4ever/CVE-2024-54498-PoC

The repository contains only a README.md file with a brief description of a macOS Sandbox escape exploit via sharedfilelistd, but no actual exploit code or technical details are provided.

Classification
Stub 30%
Attack Type
Lpe
Complexity
Theoretical
Reliability
Theoretical
Target: macOS (version unspecified)
No auth needed
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5

Scores

CVSS v3 8.8
EPSS 0.0110
EPSS Percentile 61.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

Status published
Products (4)
apple/macos < 13.7.2
Apple/macOS < 13.7.2
Apple/macOS < 14.7.2
Apple/macOS < 15.2
Published Dec 12, 2024
Tracked Since Feb 18, 2026