CVE-2024-27843

EUVD-2024-25036
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to elevate privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Affected Products (NVD)
VendorProductVersion
applemacos
12.0 ≤
𝑥
< 12.7.5
applemacos
13.0 ≤
𝑥
< 13.6.7
applemacos
14.0 ≤
𝑥
< 14.5
𝑥
= Vulnerable software versions
References
http://seclists.org/fulldisclosure/2024/May/12
https://support.apple.com/en-us/HT214106
https://support.apple.com/kb/HT214105
https://support.apple.com/kb/HT214106
https://support.apple.com/kb/HT214107
http://seclists.org/fulldisclosure/2024/May/12
https://support.apple.com/en-us/HT214106
https://support.apple.com/kb/HT214105
https://support.apple.com/kb/HT214106
https://support.apple.com/kb/HT214107