CVE-2024-27862 — Uncontrolled Resource Consumption in Apple Macos

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
2.4LOWNVD
EPSS
0.2%
top 60.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MacosApple Macos Sonoma
Timeline
PublishedJul 29
Latest updateJul 30

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.6. Enabling Lockdown Mode while setting up a Mac may cause FileVault to become unexpectedly disabled.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 0.9 | Impact: 1.4

Affected Packages3 packages

▶Appleapple/macos_sonoma14.6
▶CVEListV5apple/macos< 14.6
▶NVDapple/macos14.0 — 14.6

🔴Vulnerability Details

1
GHSA
GHSA-8vfm-rqrq-rqrv: A logic issue was addressed with improved state management↗2024-07-30
▶

📋Vendor Advisories

1
Apple
CVE-2024-27862: macOS Sonoma 14.6↗2024-07-29
▶