Security features bypass in macOS - CVE-2024-27875
Published: September 17, 2024
Vulnerability identifier: #VU97379
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-27875
CWE-ID: CWE-254
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to bypass implemented security restrictions.
The vulnerability exists due to improper checks in Control Center. Privacy indicators for microphone or camera access may be attributed incorrectly, resulting in information disclosure.Affected software
macOS
How to mitigate CVE-2024-27875
Install updates from vendor's website.
macOS - update to 15.0 24A335