An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user data.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT214100 | Vendor Advisory |
https://support.apple.com/en-us/HT214101 | Vendor Advisory |
https://support.apple.com/en-us/HT214102 | Vendor Advisory |
https://support.apple.com/en-us/HT214104 | Vendor Advisory |
https://support.apple.com/en-us/HT214105 | Vendor Advisory |
https://support.apple.com/en-us/HT214106 | Vendor Advisory |
https://support.apple.com/en-us/HT214107 | Vendor Advisory |
https://support.apple.com/kb/HT214100 | Vendor Advisory |
https://support.apple.com/kb/HT214101 | Vendor Advisory |
https://support.apple.com/kb/HT214102 | Vendor Advisory |
https://support.apple.com/kb/HT214104 | Vendor Advisory |
https://support.apple.com/kb/HT214105 | Vendor Advisory |
https://support.apple.com/kb/HT214106 | Vendor Advisory |
https://support.apple.com/kb/HT214107 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Jul 2024, 13:29
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
|
First Time |
Apple tvos
Apple macos Apple iphone Os Apple watchos Apple Apple ipados |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
CWE | NVD-CWE-noinfo | |
References | () https://support.apple.com/en-us/HT214100 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214101 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214102 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214104 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214105 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214107 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214100 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214101 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214102 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214104 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214105 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/kb/HT214107 - Vendor Advisory |
11 Jun 2024, 13:54
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
11 Jun 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Jun 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-10 21:15
Updated : 2024-07-02 13:29
NVD link : CVE-2024-27805
Mitre link : CVE-2024-27805
CVE.ORG link : CVE-2024-27805
JSON object : View
Products Affected
apple
- watchos
- ipados
- tvos
- iphone_os
- macos
CWE