CVE-2024-27855
EUVD-2024-2504810.06.2024, 21:15
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. A shortcut may be able to use sensitive data with certain actions without prompting the user.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | ipados | 𝑥 < 16.7.8 |
| apple | ipados | 17.0 ≤ 𝑥 < 17.5 |
| apple | iphone_os | 𝑥 < 16.7.8 |
| apple | iphone_os | 17.0 ≤ 𝑥 < 17.5 |
| apple | macos | 𝑥 < 13.6.7 |
| apple | macos | 14.0 ≤ 𝑥 < 14.5 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| apple | iphone_os | 𝑥 < 17.5 | ADP |
| apple | iphone_os | 𝑥 < 16.7.8 | ADP |
| apple | ipad_os | 𝑥 < 17.5 | ADP |
| apple | ipad_os | 𝑥 < 16.7.8 | ADP |
| apple | macos | 13.0 ≤ 𝑥 < 13.6.7 | ADP |
| apple | macos | 14.0 ≤ 𝑥 < 14.5 | ADP |
Common Weakness Enumeration
References