Main Vulnerability Database Vulnerabilities #VU105823

Permissions, Privileges, and Access Controls in macOS - CVE-2024-54542

Published: March 18, 2025

Vulnerability identifier: #VU105823

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-54542

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Apple Inc.

Affected software:
macOS

Detailed vulnerability description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to incorrect state management in Safari. Private Browsing tabs may be accessed without authentication.

Install updates from vendor's website.