CVE-2024-27825

Summary

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to bypass certain Privacy preferences.

Affected Software

Weaknesses

• An app may be able to bypass certain Privacy preferences

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT214106
• https://support.apple.com/kb/HT214106
• http://seclists.org/fulldisclosure/2024/May/12

References

• https://support.apple.com/en-us/120903

• ←Previous
• Next→