CVE-2024-54465
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges.
Risk Assessment
A malicious app running on an unpatched system may gain higher privileges than intended. This can lead to privilege escalation and further system compromise.
Recommendation
Update macOS to Sequoia 15.2 or later. Restrict running untrusted applications until the update is applied.
Other vulnerabilities in macOS
See all- CVE-2026-84539Critical
An out-of-bounds write issue in macOS allows an app to cause unexpected system termination. The issue was addressed with improved bounds checking and is fixed in macOS Golden Gate 27 and macOS Tahoe 26.7.2.
- CVE-2026-112552Critical
An out-of-bounds write issue was addressed with improved bounds checking. An attacker with control of a network file server may be able to cause unexpected system termination.
- CVE-2026-112526Critical
A buffer overflow in macOS was addressed with improved bounds checking. A remote attacker may be able to cause unexpected app termination.
- CVE-2026-112521Critical
A buffer overflow in macOS was addressed with improved bounds checking. A sandboxed process may be able to circumvent sandbox restrictions.
- CVE-2026-112497Critical
This issue was addressed with improved permissions checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to break out of its sandbox.
- CVE-2026-112478Critical
An out-of-bounds read issue was addressed by removing the vulnerable code. An app may be able to cause unexpected system termination or read kernel memory.
- CVE-2026-112443Critical
The issue was addressed with improved memory handling. The issue affects macOS Golden Gate 27.2 and macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.
- CVE-2026-86868Critical
An authentication issue in macOS was addressed with improved state management. An attacker may be able to impersonate other users.
- CVE-2026-65414Critical
An out-of-bounds write issue in Apple products was addressed with improved bounds checking. A remote attacker may be able to cause unexpected app termination or arbitrary code execution. This issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
- CVE-2026-65381Critical
A validation issue in entitlement verification in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. A malicious app may break out of its sandbox.
Original NVD description (English source)
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS