Low severity3.3NVD Advisory· Published Mar 8, 2024· Updated Jun 17, 2026
CVE-2024-23245
CVE-2024-23245
Description
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=12.0,<12.7.4
- (no CPE)range: Monterey 12.7.4, Sonoma 14.4, Ventura 13.6.5
Patches
Vulnerability mechanics
References
12- support.apple.com/en-us/HT214083nvdVendor Advisory
- support.apple.com/en-us/HT214084nvdVendor Advisory
- support.apple.com/en-us/HT214085nvdVendor Advisory
- seclists.org/fulldisclosure/2024/Mar/21nvdMailing List
- seclists.org/fulldisclosure/2024/Mar/22nvdMailing List
- seclists.org/fulldisclosure/2024/Mar/23nvdMailing List
- support.apple.com/en-us/120884nvd
- support.apple.com/en-us/120886nvd
- support.apple.com/en-us/120895nvd
- support.apple.com/kb/HT214083nvd
- support.apple.com/kb/HT214084nvd
- support.apple.com/kb/HT214085nvd
News mentions
0No linked articles in our index yet.