← back
CVE-2024-27798

CVE-2024-27798

CVSS 7.8 HIGHEPSS 0.2%CWE-863
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 May 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Apple · macOS
References
http://seclists.org/fulldisclosure/2024/May/12https://support.apple.com/en-us/120899https://support.apple.com/en-us/120900https://support.apple.com/en-us/120903https://support.apple.com/en-us/HT214106https://support.apple.com/kb/HT214105https://support.apple.com/kb/HT214106https://support.apple.com/kb/HT214107