CVE-2024-27807

Summary

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5. An app may be able to circumvent App Privacy Report logging.

Affected Software

VendorProductVersion RangeStatus
AppleiOS and iPadOS0 < 16.7.8affected
AppleiOS and iPadOS0 < 17.5affected

Weaknesses

  • An app may be able to circumvent App Privacy Report logging

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References