CVE-2024-27876

A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

History

12 Dec 2024, 16:10

Type Values Removed Values Added
References () https://support.apple.com/en-us/121234 - () https://support.apple.com/en-us/121234 - Vendor Advisory
References () https://support.apple.com/en-us/121238 - () https://support.apple.com/en-us/121238 - Vendor Advisory
References () https://support.apple.com/en-us/121246 - () https://support.apple.com/en-us/121246 - Vendor Advisory
References () https://support.apple.com/en-us/121247 - () https://support.apple.com/en-us/121247 - Vendor Advisory
References () https://support.apple.com/en-us/121249 - () https://support.apple.com/en-us/121249 - Vendor Advisory
References () https://support.apple.com/en-us/121250 - () https://support.apple.com/en-us/121250 - Vendor Advisory
First Time Apple iphone Os
Apple visionos
Apple
Apple macos
Apple ipados
CVSS v2 : unknown
v3 : 8.1
v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

17 Sep 2024, 20:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.1
CWE CWE-362
Summary
  • (es) Se solucionó una condición de ejecución mejorando el bloqueo. Este problema se solucionó en macOS Ventura 13.7, iOS 17.7 y iPadOS 17.7, visionOS 2, iOS 18 y iPadOS 18, macOS Sonoma 14.7 y macOS Sequoia 15. Descomprimir un archivo manipulado con fines malintencionados puede permitir que un atacante escriba archivos arbitrarios.

17 Sep 2024, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-17 00:15

Updated : 2024-12-12 16:10


NVD link : CVE-2024-27876

Mitre link : CVE-2024-27876

CVE.ORG link : CVE-2024-27876


JSON object : View

Products Affected

apple

  • iphone_os
  • visionos
  • ipados
  • macos
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')