---
id: CVE-2024-54529
title: A logic issue was addressed with improved checks
summary: >-
  A logic issue was addressed with improved checks. This issue is fixed in macOS
  Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to
  execute arbitrary code out of its sandbox or with certain elevated privileges.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-94
vendor: apple
product: macos
affected:
  - 'macos >= 13.0, < 13.7.2'
  - 'macos >= 14.0, < 14.7.2'
  - 'macos >= 15.0, < 15.2'
patched:
  - macos 15.2
published: '2024-12-12'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T22:17:27.920'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-54529'
references:
  - url: 'https://support.apple.com/en-us/121839'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/121840'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/121842'
    label: product-security@apple.com
  - url: 'http://seclists.org/fulldisclosure/2024/Dec/7'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://seclists.org/fulldisclosure/2024/Dec/9'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.0033
epssPercentile: 0.2633
ingestedAt: '2026-11-05T06:38:03.590Z'
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2025-01-24T04:55:40.300495Z'
---

## Overview

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

## Affected

- `macos >= 13.0, < 13.7.2`
- `macos >= 14.0, < 14.7.2`
- `macos >= 15.0, < 15.2`

## Remediation

Upgrade past the affected range:

- `macos 15.2`