CVE-2024-44267: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may…

PriorityP422medium5.5CVSS 3.1

AVLACLPRNUIRSUCNIHAN

EPSS

0.44%

36.2th percentile

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to modify protected parts of the file system.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
apple	macos	< 14.7.1	14.7.1
apple	macos	< 15.1	15.1
apple	macos	< 13.7.1	13.7.1
apple	macos	>= 14.0 < 14.7.1	14.7.1
apple	macos_sequoia	—	—
apple	macos_sonoma	—	—
apple	macos_ventura	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET EXPLOIT Possible ImageMagick (7.1.0-49) DOS PNG Observed Inbound (CVE-2022-44267)

suricata·2023-02-05·CVSS 6.5

CVE-2022-44267 [MEDIUM] ET EXPLOIT Possible ImageMagick (7.1.0-49) DOS PNG Observed Inbound (CVE-2022-44267) ET EXPLOIT Possible ImageMagick (7.1.0-49) DOS PNG Observed Inbound (CVE-2022-44267) Rule: alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET EXPLOIT Possible ImageMagick (7.1.0-49) DOS PNG Observed Inbound (CVE-2022-44267)"; flow:established,to_client; file.data; content:"|89|PNG"; content:"profile|00 2d|"; within:256; fast_pattern; reference:cve,2022-44267; classtype:attempted-dos; sid:2044119; rev:2; metadata:attack_target Server, created_at 2023_02_05, cve CVE_2022_44267, deployment Perimeter, deployment Internal, confidence Medium, signature_severity Major, tag Exploit, updated_at 2024_03_08, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application;)

Suricata

ET EXPLOIT Possible ImageMagick (7.1.0-49) DOS PNG Upload Attempt (CVE-2022-44267)

suricata·2023-02-05·CVSS 6.5

CVE-2022-44267 [MEDIUM] ET EXPLOIT Possible ImageMagick (7.1.0-49) DOS PNG Upload Attempt (CVE-2022-44267) ET EXPLOIT Possible ImageMagick (7.1.0-49) DOS PNG Upload Attempt (CVE-2022-44267) Rule: alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET EXPLOIT Possible ImageMagick (7.1.0-49) DOS PNG Upload Attempt (CVE-2022-44267)"; flow:established,to_server; http.method; content:"POST"; http.request_body; content:"|89|PNG"; content:"profile|00 2d|"; within:256; fast_pattern; reference:cve,2022-44267; classtype:attempted-dos; sid:2044118; rev:2; metadata:attack_target Server, created_at 2023_02_05, cve CVE_2022_44267, deployment Perimeter, deployment Internal, confidence Medium, signature_severity Major, tag Exploit, updated_at 2024_03_08, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application;)