PT-2024-4842 · Apple · Ipados+3

Csaba Fitzl + 1 · Published 2024-05-13 · Updated 2025-07-29 · CVE-2024-27848

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iPadOS versions prior to 17.5 iOS versions prior to 17.5 macOS versions prior to Sonoma 14.5

Description The issue relates to inherited permissions errors within the StorageKit component. Exploitation may allow an attacker to elevate privileges to the root level. A malicious application may be able to gain root privileges.

Recommendations Update to iPadOS 17.5 or later. Update to iOS 17.5 or later. Update to macOS Sonoma 14.5 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

CWE-277

Related Identifiers

BDU:2024-05366

CVE-2024-27848

Affected Products

Apple Macos

Ios

Ipados

Macos Sonoma

References · 15

• https://support.apple.com/en-us/HT214106 · Vendor Advisory
• https://support.apple.com/en-us/HT214101 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27848 · Vendor Advisory
• https://support.apple.com/kb/HT214106 · Vendor Advisory
• https://support.apple.com/kb/HT214101 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27848 · Security Note
• https://bdu.fstec.ru/vul/2024-05366 · Security Note
• https://t.me/cvenotify/85123 · Telegram Post
• https://twitter.com/TweetThreatNews/status/1893290013132984374 · Twitter Post
• https://twitter.com/CVEnew/status/1800290559292260522 · Twitter Post
• https://twitter.com/ACC21827174/status/1801540213044613172 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27848 · Note
• https://t.me/CyberSecurityTechnologies/12205 · Telegram Post
• https://support.apple.com/en-us/120903 · Note
• https://support.apple.com/en-us/120905 · Note