Lucene search
HistoryJul 29, 2024 - 11:15 p.m.
CVE-2024-27872
macos
symlink validation
security issue
user data access
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.4%
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.6. An app may be able to access protected user data.
Affected configurations
Node
applemacosRange<14.6
Related
cve
cve
CVE-2024-27872
2024-07-29 23:15:10
cvelist
cvelist
CVE-2024-27872
2024-07-29 22:16:28
vulnrichment
vulnrichment
CVE-2024-27872
2024-07-29 22:16:28
nessus
nessus
macOS 14.x < 14.6 Multiple Vulnerabilities (HT214119)
2024-07-29 00:00:00
macOS 14.x < 14.6 Multiple Vulnerabilities (120911)
2024-09-13 00:00:00
openvas
openvas
Apple MacOSX Security Update (HT214119)
2024-07-30 00:00:00
apple
apple
About the security content of macOS Sonoma 14.6
2024-07-29 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.4%
Related for NVD:CVE-2024-27872