CVE-2024-27871

EPSS 0.04%
Veröffentlicht 29.07.2024 23:15:10
Zuletzt bearbeitet 02.04.2026 19:17:36
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. An app may be able to access protected user data.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 11

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ iPadOS Version < 17.6

Apple ≫ iPhone OS Version < 17.6

Apple ≫ macOS Version < 14.6

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.11

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://seclists.org/fulldisclosure/2024/Jul/18

Third Party Advisory

Mailing List

https://support.apple.com/kb/HT214119

http://seclists.org/fulldisclosure/2024/Jul/16

Third Party Advisory

Mailing List

https://support.apple.com/kb/HT214117

https://support.apple.com/en-us/HT214119

Vendor Advisory

Release Notes

https://support.apple.com/en-us/HT214117