CVE-2024-27872 in macOS

摘要

由 MITRE • 2024-07-30

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.6. An app may be able to access protected user data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 负责: Apple
• 预定: 2024-02-26
• 披露: 2024-07-30
• 管理: 已接受
• 条目: VDB-273035
• CPE: 准备好
• CWE: CWE-61 (已确认)
• CVSS: 5.5 (NVD)
• EPSS: 0.00253
• KEV: 否
• 活动: 非常低
• 部门: Transportation, Pharma, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-27872
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-27872
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-27872/