VulnerabilityModified

CVE-2024-27827

An app may be able to read arbitrary files.

MEDIUM 5.5EPSS 0.25%

Does this matter?

Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.

Description

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to read arbitrary files.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS: 0.25% probability · 16th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: apple/macos
Source: product-security@apple.com

References

https://support.apple.com/en-us/120900
https://support.apple.com/en-us/120903
http://seclists.org/fulldisclosure/2024/May/12Mailing List
https://support.apple.com/en-us/HT214106Vendor Advisory
https://support.apple.com/kb/HT214106Vendor Advisory
https://support.apple.com/kb/HT214107Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.