CVE Vulnerabilities

CVE-2024-27799

Published: Jun 10, 2024 | Modified: Jul 02, 2024
CVSS 3.x
3.3
LOW
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode.

Affected Software

Name Vendor Start Version End Version
Ipados Apple * 16.7.8 (excluding)
Iphone_os Apple * 16.7.8 (excluding)
Macos Apple * 12.7.5 (excluding)
Macos Apple 13.0 (including) 13.6.7 (excluding)
Macos Apple 14.0 (including) 14.5 (excluding)

References