CVE-2024-27876

Description

A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.043

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities are fixed in Mac OS - Ventura (Software Update) - AutoReboot (13.7.6)Mac
Multiple vulnerabilities are fixed in Mac OS - Ventura (Software Update) - AutoReboot (13.7.5)Mac
Multiple vulnerabilities are fixed in Mac OS - Ventura (Software Update) - AutoReboot (13.7.3)Mac
Multiple vulnerabilities are fixed in Mac OS - Ventura (Software Update) - AutoReboot (13.7.2)Mac
Multiple vulnerabilities are fixed in Mac OS - Ventura 13.7.1 (Software Update) - AutoRebootMac
Multiple vulnerabilities are fixed in Mac OS - Ventura 13.7 (Software Update) - AutoRebootMac
Multiple vulnerabilities are fixed in Mac OS - Ventura (Software Update) - AutoReboot (13.7.4)Mac
Multiple vulnerabilities are fixed in Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)Mac
Multiple vulnerabilities are fixed in Mac OS - Ventura 13.7.8 (Software Update) (Auto Reboot) (CVE-2025-43300)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma (Software Update) - AutoReboot (14.7.6)Mac
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.6 (Software Update) (Auto Reboot)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma (Software Update) - AutoReboot (14.7.5)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma (Software Update) - AutoReboot (14.7.3)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma (Software Update) - AutoReboot (14.7.2)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.7.1 (Software Update) - AutoReboot (Deployment-Only)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.7.1 (Software Update) for MacOS 14.3.1 - AutoRebootMac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.7 (Software Update) - AutoRebootMac
Multiple vulnerabilities are fixed in Mac OS - Sonoma (Software Update) - AutoReboot (14.7.4)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.7.7 (Software Update)(Auto Reboot)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.7.8 (Software Update) (Auto Reboot) (CVE-2025-43300)Mac
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.6.1 (Software Update) (Auto Reboot)(CVE-2025-43300)Mac
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.7 (Software Update) (Auto Reboot)Mac
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.7.1 (Software Update) (Auto Reboot)Mac
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot) (Deployment-Only)Mac
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.7.3 (Software Update) (Auto Reboot)Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611601Mac OS - Ventura 13.7.7 (Software Update) (Auto Reboot)(Deployment-Only)
PATCH-611833Mac OS - Ventura 13.7.8 (Software Update) (Auto Reboot) (CVE-2025-43300)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-609043Mac OS - Sonoma 14.7.1 (Software Update) - AutoReboot (Deployment-Only)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-609043Mac OS - Sonoma 14.7.1 (Software Update) - AutoReboot (Deployment-Only)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)
PATCH-613037Mac OS Sequoia 15.7.3 (Software Update) (Auto Reboot)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234