CVE-2024-27796: high-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A privilege escalation vulnerability in Apple operating systems allows an attacker to gain higher-level access to a device. This is a serious flaw because it can give attackers control over sensitive functions and data that should be restricted.
This privilege escalation vulnerability affects iOS, iPadOS, and macOS through unspecified mechanisms (CWE-1325: Improperly Controlled Sequential Write in Fixed-Size Elements). An attacker with local access could elevate their privileges on the affected system. The issue was remediated by implementing improved privilege-checking mechanisms in the patched versions.
In the same product, most dangerous first.