CVE-2024-27847 | BDVDB-2026-235372 Detail
AppleiOS and iPadOS
Description#
This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to bypass Privacy preferences.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-277 Insecure Inherited Permissions
References#
- https://support.apple.com/en-us/120898
- https://support.apple.com/en-us/120899
- https://support.apple.com/en-us/120900
- https://support.apple.com/en-us/120903
- https://support.apple.com/en-us/120905
- https://support.apple.com/en-us/HT214101
- https://support.apple.com/en-us/HT214106
- https://support.apple.com/kb/HT214107
- http://seclists.org/fulldisclosure/2024/May/10
- https://support.apple.com/kb/HT214105
- https://support.apple.com/kb/HT214100
- https://support.apple.com/kb/HT214106
- http://seclists.org/fulldisclosure/2024/May/12
- https://support.apple.com/kb/HT214101
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.