Lucene search
HistoryMay 14, 2024 - 3:13 p.m.
CVE-2024-27827
improved state management
arbitrary file read
macos sonoma 14.5
cve-2024-27827
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
4.9
Confidence
High
EPSS
0
Percentile
15.5%
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5. An app may be able to read arbitrary files.
Related
cve
cve
CVE-2024-27827
2024-05-14 15:13:06
vulnrichment
vulnrichment
CVE-2024-27827
2024-05-13 23:00:54
cvelist
cvelist
CVE-2024-27827
2024-05-13 23:00:54
apple
apple
About the security content of macOS Ventura 13.6.7
2024-05-13 00:00:00
About the security content of macOS Sonoma 14.5
2024-05-13 00:00:00
nessus
nessus
macOS 13.x < 13.6.7 Multiple Vulnerabilities (HT214107)
2024-05-13 00:00:00
macOS 14.x < 14.5 Multiple Vulnerabilities (HT214106)
2024-05-13 00:00:00
openvas
openvas
Apple MacOSX Security Update (HT214107)
2024-05-14 00:00:00
Apple MacOSX Security Update (HT214106)
2024-05-14 00:00:00
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
4.9
Confidence
High
EPSS
0
Percentile
15.5%
Related for NVD:CVE-2024-27827