CVE-2024-27799

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 09:05

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT214100 - Vendor Advisory () https://support.apple.com/en-us/HT214100 - Vendor Advisory
References () https://support.apple.com/en-us/HT214105 - Vendor Advisory () https://support.apple.com/en-us/HT214105 - Vendor Advisory
References () https://support.apple.com/en-us/HT214106 - Vendor Advisory () https://support.apple.com/en-us/HT214106 - Vendor Advisory
References () https://support.apple.com/en-us/HT214107 - Vendor Advisory () https://support.apple.com/en-us/HT214107 - Vendor Advisory
References () https://support.apple.com/kb/HT214100 - Vendor Advisory () https://support.apple.com/kb/HT214100 - Vendor Advisory
References () https://support.apple.com/kb/HT214105 - Vendor Advisory () https://support.apple.com/kb/HT214105 - Vendor Advisory
References () https://support.apple.com/kb/HT214106 - Vendor Advisory () https://support.apple.com/kb/HT214106 - Vendor Advisory
References () https://support.apple.com/kb/HT214107 - Vendor Advisory () https://support.apple.com/kb/HT214107 - Vendor Advisory

02 Jul 2024, 13:38

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.3
CPE cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
First Time Apple ipados
Apple
Apple macos
Apple iphone Os
CWE NVD-CWE-noinfo
References () https://support.apple.com/en-us/HT214100 - () https://support.apple.com/en-us/HT214100 - Vendor Advisory
References () https://support.apple.com/en-us/HT214105 - () https://support.apple.com/en-us/HT214105 - Vendor Advisory
References () https://support.apple.com/en-us/HT214106 - () https://support.apple.com/en-us/HT214106 - Vendor Advisory
References () https://support.apple.com/en-us/HT214107 - () https://support.apple.com/en-us/HT214107 - Vendor Advisory
References () https://support.apple.com/kb/HT214100 - () https://support.apple.com/kb/HT214100 - Vendor Advisory
References () https://support.apple.com/kb/HT214105 - () https://support.apple.com/kb/HT214105 - Vendor Advisory
References () https://support.apple.com/kb/HT214106 - () https://support.apple.com/kb/HT214106 - Vendor Advisory
References () https://support.apple.com/kb/HT214107 - () https://support.apple.com/kb/HT214107 - Vendor Advisory

11 Jun 2024, 13:54

Type Values Removed Values Added
Summary
  • (es) Este problema se solucionó con comprobaciones de derechos adicionales. Este problema se solucionó en macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 y iPadOS 16.7.8. Una aplicación sin privilegios puede registrar pulsaciones de teclas en otras aplicaciones, incluidas aquellas que utilizan el modo de entrada segura.

11 Jun 2024, 08:15

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT214100 -
  • () https://support.apple.com/kb/HT214105 -
  • () https://support.apple.com/kb/HT214106 -
  • () https://support.apple.com/kb/HT214107 -

10 Jun 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-10 21:15

Updated : 2024-11-21 09:05


NVD link : CVE-2024-27799

Mitre link : CVE-2024-27799

CVE.ORG link : CVE-2024-27799


JSON object : View

Products Affected

apple

  • iphone_os
  • macos
  • ipados