CVE-2024-27850

EPSS 0.17%
Published 10.06.2024 21:15:51
Last modified 24.03.2025 21:15:16
Source product-security@apple.com
Teams watchlist Login
Open Login

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the user.

Affected products Warnungen 0 Metrics 3 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version < 17.5

Apple ≫ iPadOS Version < 17.5

Apple ≫ iPhone OS Version < 17.5

Apple ≫ macOS Version >= 14.0 < 14.5

Apple ≫ visionOS Version < 1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.17%	0.388

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-359 Exposure of Private Personal Information to an Unauthorized Actor

The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

https://support.apple.com/en-us/HT214106

Vendor Advisory

https://support.apple.com/en-us/HT214101

Vendor Advisory

https://support.apple.com/en-us/HT214103

Vendor Advisory

http://seclists.org/fulldisclosure/2024/Jun/5

Third Party Advisory

Mailing List

https://support.apple.com/en-us/HT214108

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-27850

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-27850

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-27850

EUVD