Lucene search

K
nvd[email protected]NVD:CVE-2024-27877
HistoryJul 29, 2024 - 11:15 p.m.

CVE-2024-27877

2024-07-2923:15:10
web.nvd.nist.gov
3
cve-2024-27877
denial-of-service
memory disclosure
macos sonoma
macos monterey
macos ventura

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

EPSS

0.001

Percentile

20.1%

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

Affected configurations

Nvd
Node
applemacosRange12.012.7.6
OR
applemacosRange1313.6.8
OR
applemacosRange1414.6
VendorProductVersionCPE
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

EPSS

0.001

Percentile

20.1%