CVE-2024-27805

An issue was addressed with improved validation of environment variables

Medium · published June 10, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

An issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to access sensitive user data.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Published
2024-06-10T20:56Z
EPSS history
Timeline
  • 10 JUN 20:56Z
    An issue was addressed with improved validation of environment variables
    cvelistv5