VulnerabilityModified
CVE-2024-27823
A race condition was addressed with improved locking.
MEDIUM 5.9EPSS 0.68%
Does this matter?
Lower severity and a low EPSS score (0.68%). Track it; it rarely justifies an emergency change on its own.
Description
A race condition was addressed with improved locking. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.3, watchOS 10.5. An attacker in a privileged network position may be able to spoof network packets.
- CVSS 3.1
- 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.68% probability · 50th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/visionos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/120898
- https://support.apple.com/en-us/120899
- https://support.apple.com/en-us/120900
- https://support.apple.com/en-us/120901
- https://support.apple.com/en-us/120902
- https://support.apple.com/en-us/120903
- https://support.apple.com/en-us/120905
- https://support.apple.com/en-us/120915
- http://seclists.org/fulldisclosure/2024/Jul/23Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214100Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214101Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214102Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214104Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214105Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214106Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214107Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214123Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214100Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214101Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214102Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214104Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214105Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214106Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214107Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214123
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.