Lucene search

AppleCVE-2024-27844

HistoryJun 10, 2024 - 9:15 p.m.

CVE-2024-27844

2024-06-1021:15:51

apple

web.nvd.nist.gov

improved checks

cve-2024-27844

visionos 1.2

macos sonoma 14.5

safari 17.5

website permission dialog

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

21.3%

JSON

The issue was addressed with improved checks. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5. A website’s permission dialog may persist after navigation away from the site.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

applesafariRange<17.5

applemacosRange14.0–14.5

applevisionosRange<1.2

VendorProductVersionCPE
applesafari*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
applevisionos*cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	safari	*	cpe:2.3:a:apple:safari::::::::
apple	macos	*	cpe:2.3:o:apple:macos::::::::
apple	visionos	*	cpe:2.3:o:apple:visionos::::::::

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "14.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "visionOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "1.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "Safari",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "17.5",
        "versionType": "custom"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2024/Jun/5

support.apple.com/en-us/HT214103

support.apple.com/en-us/HT214106

support.apple.com/en-us/HT214108

support.apple.com/kb/HT214103

support.apple.com/kb/HT214106

support.apple.com/kb/HT214108

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

21.3%

JSON

Related for CVE-2024-27844