CVE-2024-27887
published 2024-07-29CVE-2024-27887: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.
PriorityP424medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.24%
14.5th percentile
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 14.4 | 14.4 |
| apple | macos_sonoma | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2024-27887: macOS Sonoma 14.4
vendor_apple·2024-03-07·CVSS 5.5
CVE-2024-27887 [MEDIUM] CVE-2024-27887: macOS Sonoma 14.4
Apple Security Update: About the security content of macOS Sonoma 14.4
Product: macOS Sonoma
Version: 14.4
CVE: CVE-2024-27887
Component: NSSpellChecker
Impact: An app may be able to access user-sensitive data
Description: A path handling issue was addressed with improved validation.
GHSA
GHSA-cj5j-prcq-x46c: A path handling issue was addressed with improved validation
ghsa_unreviewed·2024-07-30
CVE-2024-27887 [MEDIUM] CWE-22 GHSA-cj5j-prcq-x46c: A path handling issue was addressed with improved validation
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-29
Published