CVE-2024-27872
Security Initialization: An app may be able to access protected user data
CVE-2024-27872 is fixed in Sonoma on 1 platform by Sonoma 14.6 (version 14.6), released July 29, 2024. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.5
MEDIUM
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0025
16th percentile
This issue was addressed with improved validation of symlinks.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| macOS | |||
| Sonoma | 14.6 | Sonoma 14.6 | Jul 29, 2024 |