CVE-2024-27848
EUVD-2024-2504110.06.2024, 21:15
This issue was addressed with improved permissions checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. A malicious app may be able to gain root privileges.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | ipados | 𝑥 < 17.5 |
| apple | iphone_os | 𝑥 < 17.5 |
| apple | macos | 14.0 ≤ 𝑥 < 14.5 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| apple | iphone_os | 𝑥 < 17.5 | ADP |
| apple | ipad_os | 𝑥 < 17.5 | ADP |
| apple | macos | 𝑥 < 14.5 | ADP |
Common Weakness Enumeration
- CWE-863 - Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
- CWE-277 - Insecure Inherited PermissionsA product defines a set of insecure permissions that are inherited by objects that are created by the program.