#VU97379 Security features bypass in macOS - CVE-2024-27875

Vulnerability identifier: #VU97379

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-27875

CWE-ID: CWE-254

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
macOS

Software vendor:
Apple Inc.

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to improper checks in Control Center. Privacy indicators for microphone or camera access may be attributed incorrectly, resulting in information disclosure.

Install updates from vendor's website.

• https://support.apple.com/en-us/121238