{"id":"CVE-2024-27888","state":"PUBLISHED","title":"A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to modify protected parts o","description":"A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to modify protected parts of the file system.","publishedAt":"2024-07-29T22:17:24.302Z","updatedAt":"2026-04-02T18:27:17.422Z","severity":{"score":7.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.4","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/120895","https://support.apple.com/en-us/HT214084","https://support.apple.com/kb/HT214084"],"weaknesses":["CWE-281"],"ingestedAt":"2026-10-29T20:07:10.607Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/27xxx/CVE-2024-27888.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-27888","state":"PUBLISHED","datePublished":"2024-07-29T22:17:24.302Z","dateUpdated":"2026-04-02T18:27:17.422Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2024-02-26T15:32:28.544Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to modify protected parts of the file system."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"14.4","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/120895"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to modify protected parts of the file system"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:27:17.422Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"apple","product":"macos","defaultStatus":"unknown","versions":[{"version":"14.0","status":"affected","lessThan":"14.4","versionType":"custom"}],"cpes":["cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-07-30T17:37:32.246403Z","id":"CVE-2024-27888","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-281","type":"CWE","lang":"en","description":"CWE-281 Improper Preservation of Permissions"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-30T17:51:06.676Z"}},{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT214084","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT214084","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T00:41:55.495Z"}}]}}}