CVEvulnerability
CVE-2024-27789
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-922
Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.7. An app may be able to access user-sensitive data.
Affected configurations
• apple ipados (< 16.7.8)
• apple iphone os (< 16.7.8)
• apple macos (>= 12.0 < 12.7.5)
• apple macos (>= 13.0 < 13.6.7)
• apple macos (>= 14.0 < 14.4)
Related
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness
References
- https://support.apple.com/en-us/120895 support.apple.com
- https://support.apple.com/en-us/120898 support.apple.com
- https://support.apple.com/en-us/120899 support.apple.com
- https://support.apple.com/en-us/120900 support.apple.com
- http://seclists.org/fulldisclosure/2024/May/11 Mailing List
- http://seclists.org/fulldisclosure/2024/May/13 Mailing List
- http://seclists.org/fulldisclosure/2024/May/14 Mailing List
- https://support.apple.com/en-us/HT214084 Vendor Advisory
- https://support.apple.com/en-us/HT214100 Vendor Advisory
- https://support.apple.com/en-us/HT214105 Vendor Advisory
- https://support.apple.com/en-us/HT214107 Vendor Advisory
- https://support.apple.com/kb/HT214084 Vendor Advisory
- https://support.apple.com/kb/HT214100 Vendor Advisory
- https://support.apple.com/kb/HT214105 Vendor Advisory
- https://support.apple.com/kb/HT214107 Vendor Advisory