CVE-2024-27796 - OpenCVE

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to elevate privileges.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
http://seclists.org/fulldisclosure/2024/May/10
http://seclists.org/fulldisclosure/2024/May/12
https://support.apple.com/en-us/HT214101
https://support.apple.com/en-us/HT214106
https://support.apple.com/kb/HT214100
https://support.apple.com/kb/HT214101
https://support.apple.com/kb/HT214105
https://support.apple.com/kb/HT214106
https://support.apple.com/kb/HT214107

History

No history.

MITRE

Status: PUBLISHED

Assigner: apple

Published: 2024-05-13T23:00:54.914Z

Updated: 2024-08-02T00:41:55.404Z

Reserved: 2024-02-26T15:32:28.515Z

Link: CVE-2024-27796

Vulnrichment

Updated: 2024-08-02T00:41:55.404Z

NVD

Status : Awaiting Analysis

Published: 2024-05-14T15:13:03.243

Modified: 2024-07-03T01:50:50.207

Link: CVE-2024-27796

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-27796", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2024-02-26T15:32:28.515Z", "datePublished": "2024-05-13T23:00:54.914Z", "dateUpdated": "2024-08-02T00:41:55.404Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "An attacker may be able to elevate privileges"}]}], "affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "17.5", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "14.5", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to elevate privileges."}], "references": [{"url": "https://support.apple.com/en-us/HT214101"}, {"url": "https://support.apple.com/en-us/HT214106"}, {"url": "https://support.apple.com/kb/HT214107"}, {"url": "http://seclists.org/fulldisclosure/2024/May/10"}, {"url": "https://support.apple.com/kb/HT214105"}, {"url": "https://support.apple.com/kb/HT214100"}, {"url": "https://support.apple.com/kb/HT214106"}, {"url": "http://seclists.org/fulldisclosure/2024/May/12"}, {"url": "https://support.apple.com/kb/HT214101"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2024-05-13T23:00:54.914Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-27796", "role": "CISA Coordinator", "options": [{"Exploitation": "None"}, {"Automatable": "Yes"}, {"Technical Impact": "Total"}], "version": "2.0.3", "timestamp": "2024-05-16T04:00:13.545424Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:apple:ipad_os:-:*:*:*:*:*:*:*"], "vendor": "apple", "product": "ipad_os", "versions": [{"status": "affected", "version": "-", "lessThan": "17.5", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*"], "vendor": "apple", "product": "iphone_os", "versions": [{"status": "affected", "version": "-", "lessThan": "17.5", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*"], "vendor": "apple", "product": "macos", "versions": [{"status": "affected", "version": "-", "lessThan": "14.5", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1325", "description": "CWE-1325 Improperly Controlled Sequential Memory Allocation"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:47:25.690Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:41:55.404Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.apple.com/en-us/HT214101", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214106", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214107", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/May/10", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214105", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214100", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214106", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/May/12", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214101", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.apple.com/en-us/HT214101", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214106", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214107", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/May/10", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214105", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214100", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214106", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/May/12", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT214101", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:41:55.404Z"}}, {"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-27796", "role": "CISA Coordinator", "options": [{"Exploitation": "None"}, {"Automatable": "Yes"}, {"Technical Impact": "Total"}], "version": "2.0.3", "timestamp": "2024-05-16T04:00:13.545424Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:apple:ipad_os:-:*:*:*:*:*:*:*"], "vendor": "apple", "product": "ipad_os", "versions": [{"status": "affected", "version": "-", "lessThan": "17.5", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*"], "vendor": "apple", "product": "iphone_os", "versions": [{"status": "affected", "version": "-", "lessThan": "17.5", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*"], "vendor": "apple", "product": "macos", "versions": [{"status": "affected", "version": "-", "lessThan": "14.5", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1325", "description": "CWE-1325 Improperly Controlled Sequential Memory Allocation"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-16T13:20:02.424Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "17.5", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "14.5", "versionType": "custom"}]}], "references": [{"url": "https://support.apple.com/en-us/HT214101"}, {"url": "https://support.apple.com/en-us/HT214106"}, {"url": "https://support.apple.com/kb/HT214107"}, {"url": "http://seclists.org/fulldisclosure/2024/May/10"}, {"url": "https://support.apple.com/kb/HT214105"}, {"url": "https://support.apple.com/kb/HT214100"}, {"url": "https://support.apple.com/kb/HT214106"}, {"url": "http://seclists.org/fulldisclosure/2024/May/12"}, {"url": "https://support.apple.com/kb/HT214101"}], "descriptions": [{"lang": "en", "value": "The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to elevate privileges."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "An attacker may be able to elevate privileges"}]}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2024-05-13T23:00:54.914Z"}}}, "cveMetadata": {"cveId": "CVE-2024-27796", "state": "PUBLISHED", "dateUpdated": "2024-08-02T00:41:55.404Z", "dateReserved": "2024-02-26T15:32:28.515Z", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "datePublished": "2024-05-13T23:00:54.914Z", "assignerShortName": "apple"}, "dataVersion": "5.1"}