Dashboard / CVE-2024-27856

CVE-2024-27856

HIGH
MEDIUM Priority: 0.05 BB Relevance: 41/100
Published: 2025-01-15 Modified: 2026-11-09 First seen: 2026-11-09 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing a file may lead to unexpected app termination or arbitrary code execution.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
apple ipados < 16.7.8
apple iphone_os < 16.7.8
apple macos < 14.5
apple safari < 17.5
apple tvos < 17.5
apple visionos < 1.2
apple watchos < 10.5

References & Advisories (7)

https://support.apple.com/en-us/120896
Release Notes Vendor Advisory
https://support.apple.com/en-us/120898
Release Notes Vendor Advisory
https://support.apple.com/en-us/120901
Release Notes Vendor Advisory
https://support.apple.com/en-us/120902
Release Notes Vendor Advisory
https://support.apple.com/en-us/120903
Release Notes Vendor Advisory
https://support.apple.com/en-us/120905
Release Notes Vendor Advisory
https://support.apple.com/en-us/120906
Release Notes Vendor Advisory

Bug Bounty Relevance

41 / 100
✓ No authentication
✓ Low complexity

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.62%
Raw Score 0.006220
Percentile 50.2%
Date 2026-11-10

EPSS Trend

2026-11-10
0.00622
2026-11-09
0.00597
2026-11-08
0.00622

Intelligence Sources

nvd ref →

External Links