CVE-2024-27796
High
Published: 14 May 2024
Published
14 May 2024
Modified
02 April 2026
KEV Added
—
Patch
—
CVSS Score v3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.0007
21.0th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2024-27796 is a high-severity Improperly Controlled Sequential Memory Allocation (CWE-1325) vulnerability in Apple Macos. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 21.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-24989
Vulnerability details
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
apple
ipados
≤ 16.7.8 · 17.0 — 17.5
apple
iphone os
≤ 16.7.8 · 17.0 — 17.5
apple
macos
12.0 — 12.7.5 · 13.0 — 13.6.7 · 14.0 — 14.5
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.