CVE-2024-27847

MEDIUM

This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app ...

Affects 3 products across 1 vendor.

CVSS 3.15.5
EPSS0.2%
Percentile12th
PatchUnknown
CVSS Vector — Plain English Requires local access, low complexity, no authentication required, requires user interaction, impact contained to the vulnerable component, no confidentiality impact, full integrity impact, no availability impact.
CWE Weakness Definitions
CWE-277: CWE-277
◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in iOS, iPadOS, and macOS allows an app to potentially bypass Privacy preferences, which could lead to unauthorized access to user data.

BSID: BS-2024-GLOBAL-205992-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-27847?
A vulnerability in iOS, iPadOS, and macOS allows an app to potentially bypass Privacy preferences, which could lead to unauthorized access to user data.
What is the CVSS score for CVE-2024-27847?
CVE-2024-27847 has CVSS 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. EPSS: 0.2%.
Is CVE-2024-27847 actively exploited?
No confirmed active exploitation of CVE-2024-27847 as of 2026-05-30.
How do I remediate CVE-2024-27847?
Priority: MEDIUM. Advisory: https://support.apple.com/en-us/120898
What systems are affected by CVE-2024-27847?
CVE-2024-27847 affects Apple Macos, Iphone Os, Ipados.
Vulnerability Details
CVE IDCVE-2024-27847
BSIDBS-2024-GLOBAL-205992-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Published2024-05-14
Last Modified2026-04-02
ICS Relevance0%
Weakness (CWE)
CWE-277
SourceNVD
Official Description

This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to bypass Privacy preferences.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker could exploit this vulnerability by developing a malicious app that bypasses the user's Privacy settings, potentially accessing sensitive information without explicit permission.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Apple Macos ≥ 12.0, < 12.7.5 ≥ 13.0, < 13.6.7 ≥ 14.0, < 14.5
Apple Iphone Os < 16.7.8 ≥ 17.0, < 17.5
Apple Ipados < 16.7.8 ≥ 17.0, < 17.5
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 884 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashb2bb9048b95d67529556fde8c42597388c9144e392addd89ea82a00383de322ea213d4405e0b85cdd7012f18bd6c8bf70c7f6df7b7410d7484df45456557ddec
Related CVEs affecting Apple
CVE-2012-0751 10.0 The ActiveX control in Adobe Flash Player before 10.3.183.15 and 11.x before ... CVE-2011-2452 10.0 Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows,... CVE-2012-4151 10.0 Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows a... CVE-2012-4153 10.0 Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows a... CVE-2012-4159 10.0 Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows a...
View all Apple CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →