Vulnerability · NVD

CVE-2024-54536

MEDIUM 5.5 Published on 2025-01-27

The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.2. An app may be able to edit NVRAM variables.

Attack vector : Local No user interaction

Show raw CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS 0.19% exploit very unlikely percentile 8.3%

OS versions that fix this CVE

This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.

macOS Fixed in 15.2

View on NVD ↗