Arbitrary Code Execution Vulnerability in macOS Sonoma 14.5

CVE-2024-27842

7.8HIGH

Key Information

Vendor
Apple
Status
Mac OS
Vendor
CVE Published:
14 May 2024

Badges

📰 News Worthy

Summary

The CVE-2024-27842 vulnerability is an arbitrary code execution vulnerability in macOS Sonoma 14.5, which allows an app to execute arbitrary code with kernel privileges. The issue has been fixed by Apple with improved checks in macOS Sonoma 14.5. There have been no known exploitations of this vulnerability in the wild, and it is not linked to any ransomware groups.

Affected Version(s)

macOS < 14.5

News Articles

favicon imageLibero Tecnologia

Aggiornate subito i MacBook: c'è un bug pericolosissimo

Una nuova vulnerabilità colpisce i Mac e i MacBook con sistema operativo non aggiornato: un hacker può prendere il controllo completo del computer.

7 months ago

favicon imageRed Hot Cyber

Apple macOS non è sicuro. Aggiornare immediatamente per evitare potenziali attacchi

Una grave falla di sicurezza informatica è stata rilevata all'interno del sistema operativo di Apple Mac OS.

7 months ago

favicon imageSecurityLab.ru

CVE-2024-27842: macOS 14 больше не является безопасной

Ваше ядро впадёт в панику от одной лишь мысли об эксплойте к новой уязвимости.

7 months ago

References

https://support.apple.com/en-us/HT214106
https://support.apple.com/kb/HT214106
http://seclists.org/fulldisclosure/2024/May/12

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 📰

    First article discovered by prophaze.com

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database5 News Article(s)
.