CVE-2024-27837
LOWDescription
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. A local attacker may gain access to Keychain items.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| apple | macos |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-27837? +
How severe is CVE-2024-27837? +
What products are affected by CVE-2024-27837? +
How do I check if I'm vulnerable to CVE-2024-27837? +
Related Vulnerabilities
An Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in B&R APROL <4.4-00P5 may allow an authenticated …
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: 2.8.0. Users are recommended …
LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass …
When creating an export of all reusable media, the secrets of connected gift cards were included in the export even …
Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to …
Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.