CVE-2024-25249

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue in He3 App for macOS version 2.0.17, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Feb 21, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-25256.1A vulnerability, which was classified as problematic, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is CVE-2024-252509.8SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page.CVE-2024-252518.8code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control.CVE-2024-252537.5Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module.CVE-2024-252549.8SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter.CVE-2024-252559.8Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multiple third parties rep CVE-2024-25266.1A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. Affected by thi CVE-2024-252604.0elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c.CVE-2024-252628.1texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows atta CVE-2024-252697.5libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service atta CVE-2024-25278.8A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. Affected by this issue CVE-2024-252704.3An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference (IDOR) vulnerability by manipulat