Security features bypass in macOS - CVE-2024-27875

Vulnerability identifier: #VU97379

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-27875

CWE-ID: CWE-254

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Apple Inc.

Affected software:
macOS

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to improper checks in Control Center. Privacy indicators for microphone or camera access may be attributed incorrectly, resulting in information disclosure.

Install updates from vendor's website.

• https://support.apple.com/en-us/121238