CVE-2024-27885

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5. An app may be able to modify protected parts of the file system.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 09:05

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT214105 - Vendor Advisory () https://support.apple.com/en-us/HT214105 - Vendor Advisory
References () https://support.apple.com/en-us/HT214106 - Vendor Advisory () https://support.apple.com/en-us/HT214106 - Vendor Advisory
References () https://support.apple.com/en-us/HT214107 - Vendor Advisory () https://support.apple.com/en-us/HT214107 - Vendor Advisory
References () https://support.apple.com/kb/HT214105 - Vendor Advisory () https://support.apple.com/kb/HT214105 - Vendor Advisory
References () https://support.apple.com/kb/HT214106 - Vendor Advisory () https://support.apple.com/kb/HT214106 - Vendor Advisory
References () https://support.apple.com/kb/HT214107 - Vendor Advisory () https://support.apple.com/kb/HT214107 - Vendor Advisory

03 Jul 2024, 15:44

Type Values Removed Values Added
CWE CWE-59
First Time Apple macos
Apple
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.3
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/HT214105 - () https://support.apple.com/en-us/HT214105 - Vendor Advisory
References () https://support.apple.com/en-us/HT214106 - () https://support.apple.com/en-us/HT214106 - Vendor Advisory
References () https://support.apple.com/en-us/HT214107 - () https://support.apple.com/en-us/HT214107 - Vendor Advisory
References () https://support.apple.com/kb/HT214105 - () https://support.apple.com/kb/HT214105 - Vendor Advisory
References () https://support.apple.com/kb/HT214106 - () https://support.apple.com/kb/HT214106 - Vendor Advisory
References () https://support.apple.com/kb/HT214107 - () https://support.apple.com/kb/HT214107 - Vendor Advisory

11 Jun 2024, 13:54

Type Values Removed Values Added
Summary
  • (es) Este problema se solucionó con una validación mejorada de los enlaces simbólicos. Este problema se solucionó en macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5. Es posible que una aplicación pueda modificar partes protegidas del sistema de archivos.

11 Jun 2024, 08:15

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT214105 -
  • () https://support.apple.com/kb/HT214106 -
  • () https://support.apple.com/kb/HT214107 -

10 Jun 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-10 21:15

Updated : 2024-11-21 09:05


NVD link : CVE-2024-27885

Mitre link : CVE-2024-27885

CVE.ORG link : CVE-2024-27885


JSON object : View

Products Affected

apple

  • macos
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')