CVE-2024-27795
published 2024-09-17CVE-2024-27795: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet.
PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.50%
39.9th percentile
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 15 | 15 |
| apple | macos | < 15.0 | 15.0 |
| apple | macos_sequoia | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2024-27795: macOS Sequoia 15
vendor_apple·2024-09-16·CVSS 7.5
CVE-2024-27795 [HIGH] CVE-2024-27795: macOS Sequoia 15
Apple Security Update: About the security content of macOS Sequoia 15
Product: macOS Sequoia
Version: 15
CVE: CVE-2024-27795
Component: AppSandbox
Impact: A camera extension may be able to access the internet
Description: A permissions issue was addressed with additional restrictions.
GHSA
GHSA-xrvp-gx9p-8ch2: A permissions issue was addressed with additional restrictions
ghsa_unreviewed·2024-09-17
CVE-2024-27795 [HIGH] CWE-281 GHSA-xrvp-gx9p-8ch2: A permissions issue was addressed with additional restrictions
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-17
Published