ZeroHour

CVE-2024-27821

CVSS 3.1
4.7 medium
EPSS
<1%p58
Published
()
Modified
Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may output sensitive user data without consent.

Vendors
apple
Products
ipados, iphone os, macos, watchos
Weakness
CWE-22
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.