CVE-2024-27827

CVSS 6.2 MEDIUMEPSS 0.3%CWE-22

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.2EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 may 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to read arbitrary files.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

Apple · macOS

Referencias

http://seclists.org/fulldisclosure/2024/May/12 https://support.apple.com/en-us/120900 https://support.apple.com/en-us/120903 https://support.apple.com/en-us/HT214106 https://support.apple.com/kb/HT214106 https://support.apple.com/kb/HT214107