CVE-2024-27799 : This issue was addressed with additional entitlement checks. This issue is fixed

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode.

Published 2024-06-10 21:15:50

Updated 2025-03-13 17:15:30

Source Apple Inc.

View at NVD, CVE.org

Products affected by CVE-2024-27799

Apple » Iphone Os
Versions before (<) 16.7.8
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Matching versions
Apple » Macos
Versions from including (>=) 13.0 and before (<) 13.6.7
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Matching versions
Apple » Macos
Versions before (<) 12.7.5
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Matching versions
Apple » Macos
Versions from including (>=) 14.0 and before (<) 14.5
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Matching versions
Apple » Macos
Versions from including (>=) 12.0 and before (<) 12.7.5
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Matching versions
Apple » Ipados
Versions before (<) 16.7.8
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2024-27799

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 11 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2024-27799

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N	1.8	1.4	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-03-13
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N	1.8	1.4	NIST	2024-07-02
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

References for CVE-2024-27799

https://support.apple.com/en-us/HT214107

About the security content of macOS Ventura 13.6.7 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/en-us/HT214105

About the security content of macOS Monterey 12.7.5 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/kb/HT214107

About the security content of macOS Ventura 13.6.7 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/en-us/HT214100

About the security content of iOS 16.7.8 and iPadOS 16.7.8 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/kb/HT214100

About the security content of iOS 16.7.8 and iPadOS 16.7.8 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/en-us/HT214106

About the security content of macOS Sonoma 14.5 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/kb/HT214105

About the security content of macOS Monterey 12.7.5 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/kb/HT214106

About the security content of macOS Sonoma 14.5 - Apple Support
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2024-27799

Products affected by CVE-2024-27799

Exploit prediction scoring system (EPSS) score for CVE-2024-27799

CVSS scores for CVE-2024-27799

References for CVE-2024-27799