CVE-2024-44228

CVSS 7.5 · HIGH

EPSS p33

Lower risk — in the top 67% least-likely-to-be-exploited CVEs.

Patch available

Vendor advisory or patch linked

Published 10/28/2024 · updated 6/17/2026 · CWE-276

Summary

This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data.

CVSS 7.5 — HIGH

7.5 / 10

AV: Network
AC: Low complexity
PR: No privileges
UI: No user interaction
S: Scope unchanged
C: Confidentiality: High
I: Integrity: None
A: Availability: None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS exploitation probability

0.4%

Percentile p33 — Lower risk — in the top 67% least-likely-to-be-exploited CVEs.

Affected products

1 vendor/product entries

Apple Xcode< 16.0

Do you run any of these? Sign in to match this CVE against your SBOM and asset inventory automatically.

Timeline

Oct 28, 2024 · Disclosed / published in NVD
Jun 17, 2026 · Intel last updated

Intel sources

Which upstream feeds returned data for this CVE, and when they were last fetched.

NVD· 30 days ago
CVE.org· 30 days ago
FIRST EPSS· 30 days ago
CISA KEV· no data
OSV· 30 days ago

References

Vendor & CERT advisories1

https://support.apple.com/en-us/121239

Unlock the full report

See how CVE-2024-44228 hits your stack.

Free public data ends here. Sign in to correlate this CVE against your SBOM and assets, get an AI-grounded exploit chain, generate a ModSecurity virtual patch, and share findings with your team.

· Asset-aware CVSS & priority
· Grounded AI analysis (A–D graded)
· Auto-generated WAF / IPS rules
· Jira, SIEM, Slack, Teams delivery

No credit card · 100 free enrichments · analyst-grade citations.