This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT214100 | Vendor Advisory |
https://support.apple.com/en-us/HT214105 | Vendor Advisory |
https://support.apple.com/en-us/HT214106 | Vendor Advisory |
https://support.apple.com/en-us/HT214107 | Vendor Advisory |
https://support.apple.com/kb/HT214100 | Vendor Advisory |
https://support.apple.com/kb/HT214105 | Vendor Advisory |
https://support.apple.com/kb/HT214106 | Vendor Advisory |
https://support.apple.com/kb/HT214107 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Jul 2024, 13:38
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.3 |
CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
|
First Time |
Apple ipados
Apple Apple macos Apple iphone Os |
|
CWE | NVD-CWE-noinfo | |
References | () https://support.apple.com/en-us/HT214100 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214105 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214107 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214100 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214105 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214107 - Vendor Advisory |
11 Jun 2024, 13:54
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
11 Jun 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Jun 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-10 21:15
Updated : 2024-07-02 13:38
NVD link : CVE-2024-27799
Mitre link : CVE-2024-27799
CVE.ORG link : CVE-2024-27799
JSON object : View
Products Affected
apple
- iphone_os
- ipados
- macos
CWE