CVE-2024-27872

This issue was addressed with improved validation of symlinks

Medium · published July 29, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.6. An app may be able to access protected user data.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.5th percentile
Published
2024-07-29T22:16Z
EPSS history
Timeline
  • 29 JUL 22:16Z
    This issue was addressed with improved validation of symlinks
    cvelistv5