CVE-2024-27881

MEDIUM

macOS - Info Disclosure

Title source: llm
STIX 2.1

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to access information about a user’s contacts.

Scores

CVSS v3 5.3
EPSS 0.0035
EPSS Percentile 57.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-359
Status published
Products (4)
Apple/macOS < 12.7.6
Apple/macOS < 13.6.8
Apple/macOS < 14.6
apple/macos 12.0 - 12.7.6
Published Jul 29, 2024
Tracked Since Feb 18, 2026