CVE-2024-54527

CVSS 5.5 MEDIUMEPSS 0.3%

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 dic 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

This issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to access sensitive user data.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Productos afectados

Apple · iOS and iPadOS Apple · macOS Apple · tvOS Apple · watchOS

Referencias

http://seclists.org/fulldisclosure/2024/Dec/11 http://seclists.org/fulldisclosure/2024/Dec/5 http://seclists.org/fulldisclosure/2024/Dec/7 http://seclists.org/fulldisclosure/2024/Dec/9 https://support.apple.com/en-us/121837 https://support.apple.com/en-us/121839 https://support.apple.com/en-us/121840 https://support.apple.com/en-us/121842 https://support.apple.com/en-us/121843 https://support.apple.com/en-us/121844