CVE-2024-27885

June 10, 2024, 9:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

macOS

  • Sonoma 14.5
  • Ventura 13.6.7
  • Monterey 12.7.5

Source

product-security@apple.com

Tags

CVE-2024-27885 details

Published : June 10, 2024, 9:15 p.m.
Last Modified : June 10, 2024, 9:15 p.m.

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5. An app may be able to modify protected parts of the file system.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://support.apple.com/en-us/HT214105 product-security@apple.com
https://support.apple.com/en-us/HT214106 product-security@apple.com
https://support.apple.com/en-us/HT214107 product-security@apple.com
This website uses the NVD API, but is not approved or certified by it.