CVE-2024-27821

MEDIUM

iPadOS < 17.5 - Unprotected User Data Exposure via Path Handling Issue

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-27821. PoCs published by 0xilis.

AI-analyzed exploit summary This repository contains a README file referencing a writeup and PoC for CVE-2024-27821, but no actual exploit code is present. The writeup is linked to an external blog post.

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may output sensitive user data without consent.

Exploits (1)

nomisec WRITEUP 5 stars

by 0xilis · poc

https://github.com/0xilis/CVE-2024-27821

View Code ZIP pw:eip

This repository contains a README file referencing a writeup and PoC for CVE-2024-27821, but no actual exploit code is present. The writeup is linked to an external blog post.

Classification

Writeup 90%

Attack Type

Other

Complexity

Trivial

Reliability

Theoretical

Target: unspecified

No auth needed

Prerequisites: access to the linked writeup for details

devstral-2 · analyzed Feb 16, 2026 Full analysis →