CVE-2024-27886

MEDIUM

macOS Sonoma <14.4 - Info Disclosure

Title source: llm
STIX 2.1

Description

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode.

References (5)

Core 5

Scores

CVSS v3 5.5
EPSS 0.0012
EPSS Percentile 29.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-783
Status published
Products (3)
Apple/macOS < 13.7
Apple/macOS < 14.4
apple/macos 14.0 - 14.4
Published Jul 29, 2024
Tracked Since Feb 18, 2026