CVE-2024-44228

High

7.5/10

Summary

This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: NONE

References

Advisory Timeline

Published Oct 28, 2024

CVE-2024-44228

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS