← back
CVE-2024-27824

CVE-2024-27824

CVSS 7.8 HIGHEPSS 0.2%
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 May 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to elevate privileges.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Apple · macOS
References
http://seclists.org/fulldisclosure/2024/May/12https://support.apple.com/en-us/120899https://support.apple.com/en-us/120900https://support.apple.com/en-us/120903https://support.apple.com/en-us/HT214106https://support.apple.com/kb/HT214105https://support.apple.com/kb/HT214106https://support.apple.com/kb/HT214107https://www.rewterz.com/threat-advisory/multiple-apple-macos-sonoma-vulnerabilities