CVE-2024-30164: Apple macOS

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is resolved in 3.11.1 on Windows, 3.9.1 on macOS, and 3.12.1 on Linux. NOTE: although the macOS resolution is the same as for CVE-2024-30165, this vulnerability on macOS is not the same as CVE-2024-30165.

Affected products

• Apple macOS: version 3.9.1 only
• Codesys Linux: version 3.12.1 only
• Microsoft Windows: version 3.11.1 only

Published 2024-05-28. Last modified 2026-06-17.