VulnerabilityModified
CVE-2024-27888
A permissions issue was addressed by removing vulnerable code and adding additional checks.
MEDIUM 5.5EPSS 0.18%
Does this matter?
Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.
Description
A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to modify protected parts of the file system.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.18% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-276, CWE-281
- Affected
- apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/120895
- https://support.apple.com/en-us/HT214084Vendor Advisory
- https://support.apple.com/kb/HT214084Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.