Lucene search
HistoryJul 29, 2024 - 11:15 p.m.
CVE-2024-27887
cve-2024-27887
path handling
validation
macos sonoma
user-sensitive data
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
11.1%
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.
Affected configurations
Node
applemacosRange<14.4
Related
cve
cve
CVE-2024-27887
2024-07-29 23:15:11
cvelist
cvelist
CVE-2024-27887
2024-07-29 22:16:31
vulnrichment
vulnrichment
CVE-2024-27887
2024-07-29 22:16:31
nessus
nessus
macOS 14.x < 14.4 Multiple Vulnerabilities (HT214084)
2024-03-07 00:00:00
apple
apple
About the security content of macOS Sonoma 14.4
2024-03-07 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT214084)
2024-03-22 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
11.1%
Related for NVD:CVE-2024-27887