PT-2024-22089 · Apple · Macos Sonoma+1

Jiwon Park · Published 2024-07-29 · Updated 2024-12-10 · CVE-2024-27862

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.6

Description A logic issue was addressed with improved state management. Enabling Lockdown Mode while setting up a Mac may cause FileVault to become unexpectedly disabled.

Recommendations For macOS Sonoma versions prior to 14.6, update to macOS Sonoma 14.6 to resolve the issue. As a temporary workaround, consider avoiding the use of Lockdown Mode while setting up a Mac to prevent FileVault from becoming unexpectedly disabled.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-27862

Affected Products

Apple Macos

Macos Sonoma

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-27862 · Security Note
• https://support.apple.com/en-us/HT214119 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27862 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27862 · Note
• https://support.apple.com/en-us/120911 · Note
• https://support.apple.com/kb/HT214119 · Note
• http://seclists.org/fulldisclosure/2024/Jul/18 · Note
• https://t.me/cvenotify/87855 · Telegram Post
• https://t.me/cvenotify/87823 · Telegram Post