What’s Vulnerable › Vulnerabilities

CVE-2024-36287: Bypass of TCC restrictions on macOS

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-14 · updated 2026-06-17
• Weakness: CWE-693

Description

Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.

Affected products

• Mattermost Desktop: through 5.7.0

References

• https://mattermost.com/security-updates
• https://mattermost.com/security-updates

Get alerted when CVE-2024-36287 or the next vulnerability affects your stack