CVE-2024-27821

HIGH
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-27821 has a selected CVSS score of 7.5 (high); EIP currently links 1 repository PoC.

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may output sensitive user data without consent.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated May 29, 2024 · Source: CVE List

Affected products and versions

5
ProductSourceVersion range

iOS and iPadOS

Browse Apple / iOS and iPadOS
CVE ListBefore 17.5affected

macOS

Browse Apple / macOS

Default status: unknown

CVE ListBefore 14.5affected

watchOS

Browse Apple / watchOS

Default status: unknown

CVE ListBefore 10.5affected

ios

Browse apple / ios

Default status: unknown

CVE ListBefore 17.5affected

ipad_os

Browse apple / ipad_os

Default status: unknown

CVE ListBefore 17.5affected

Proofs of concept

1

Repository PoCs

GitHub0xilis/CVE-2024-27821Repository PoCby 0xilis5Not analyzed5 files

24.5 KiB

GitHub
PoC details

References

Showing 12 of 13