CVE-2024-27810

MEDIUM

iPadOS < 17.5 - Path Traversal

Title source: llm
STIX 2.1

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.

References (20)

Core 20
Core References

Scores

CVSS v3 5.5
EPSS 0.0008
EPSS Percentile 24.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-22 CWE-28
Status published
Products (11)
Apple/iOS and iPadOS < 17.5
apple/ipados < 17.5
apple/iphone_os < 17.5
Apple/macOS < 12.7.5
Apple/macOS < 13.6.7
Apple/macOS < 14.5
apple/macos 12.0 - 12.7.5
apple/tvos < 17.5
Apple/tvOS < 17.5
apple/watchos < 10.5
... and 1 more
Published May 14, 2024
Tracked Since Feb 18, 2026