CVE-2024-27810

A path handling issue was addressed with improved validation

Critical · published May 13, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00708 · 52.9th percentile
Published
2024-05-13T23:00Z
EPSS history
Timeline
  • 13 MAY 23:00Z
    A path handling issue was addressed with improved validation
    cvelistv5