CVEvulnerability
CVE-2024-27869
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-09-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-22
Description
The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to record the screen without an indicator.
Affected configurations
• apple ipados (< 18.0)
• apple iphone os (< 18.0)
• apple macos (< 15.0)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://support.apple.com/en-us/121238 Vendor Advisory
- https://support.apple.com/en-us/121250 Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Sep/32 seclists.org
- http://seclists.org/fulldisclosure/2024/Sep/33 seclists.org