8.8
CVE-2024-27851
- EPSS 0.83%
- Veröffentlicht 10.06.2024 21:15:51
- Zuletzt bearbeitet 02.04.2026 19:17:33
- Quelle product-security@apple.com
- CVE-Watchlists
- Unerledigt
LoginThe issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing maliciously crafted web content may lead to arbitrary code execution.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.83% | 0.526 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
https://support.apple.com/kb/HT214101
https://support.apple.com/kb/HT214106
https://support.apple.com/en-us/HT214106
https://support.apple.com/en-us/HT214101
https://support.apple.com/en-us/HT214102
https://support.apple.com/en-us/HT214104
https://support.apple.com/kb/HT214102
https://support.apple.com/kb/HT214104
https://support.apple.com/en-us/HT214103
http://seclists.org/fulldisclosure/2024/Jun/5
https://support.apple.com/en-us/HT214108
https://support.apple.com/kb/HT214108
https://support.apple.com/en-us/120896
https://support.apple.com/en-us/120901
https://support.apple.com/en-us/120902
https://support.apple.com/en-us/120903
https://support.apple.com/en-us/120905
https://support.apple.com/en-us/120906