CVE-2024-54471

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials.

• CWE-522
• CWE-522

• https://support.apple.com/en-us/121564
• https://support.apple.com/en-us/121568Vendor Advisory
• https://support.apple.com/en-us/121570Vendor Advisory
• https://news.ycombinator.com/item?id=43425605
• https://wts.dev/posts/password-leak/

Published

Dec 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-54466An authorization issue was addressed with improved state man…5.3
• CVE-2024-54467A cookie management issue was addressed with improved state …6.5
• CVE-2024-54468The issue was addressed with improved checks. This issue is …8.2
• CVE-2024-54469The issue was addressed with improved checks. This issue is …5.5
• CVE-2024-5447The PayPal Pay Now, Buy Now, Donation and Cart Buttons Short…4.8
• CVE-2024-54470A logic issue was addressed with improved checks. This issue…4.6
• CVE-2024-54473This issue was addressed with improved redaction of sensitiv…5.5
• CVE-2024-54474The issue was addressed with improved checks. This issue is …5.5
• CVE-2024-54475A privacy issue was addressed with improved private data red…3.3
• CVE-2024-54476The issue was addressed with improved checks. This issue is …5.5
• CVE-2024-54477The issue was addressed with improved checks. This issue is …5.5
• CVE-2024-54478An out-of-bounds access issue was addressed with improved bo…6.5