CVE-2024-27789

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Ventura 13.6.7, macOS Sonoma 14.4. An app may be able to access user-sensitive data.

Reserved 2024-02-26 | Published 2024-05-13 | Updated 2024-11-15 | Assigner apple

Problem types

An app may be able to access user-sensitive data

Product status

Any version before 16.7
affected

Any version before 13.6
affected

Any version before 12.7
affected

Any version before 14.4
affected

References

support.apple.com/en-us/HT214100

support.apple.com/en-us/HT214107

support.apple.com/en-us/HT214105

support.apple.com/en-us/HT214084

support.apple.com/kb/HT214084

support.apple.com/kb/HT214107

seclists.org/fulldisclosure/2024/May/11

seclists.org/fulldisclosure/2024/May/14

seclists.org/fulldisclosure/2024/May/13

support.apple.com/kb/HT214105

support.apple.com/kb/HT214100

cve.org (CVE-2024-27789)

nvd.nist.gov (CVE-2024-27789)

Download JSON