{"id":"CVE-2024-27810","aliases":["EUVD-2024-25003","GHSA-h83h-p79w-q64j"],"status":"published","title":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and...","description":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00708,"percentile":0.53968,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22","CWE-28"],"published":"2024-05-13T23:00:55Z","modified":"2026-06-17T07:20:20Z","products":[{"vendor":"apple","product":"ios"},{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipad_os"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/120899"},{"url":"https://support.apple.com/en-us/120900"},{"url":"https://support.apple.com/en-us/120901"},{"url":"https://support.apple.com/en-us/120902"},{"url":"https://support.apple.com/en-us/120903"},{"url":"https://support.apple.com/en-us/120905"},{"url":"https://support.apple.com/en-us/HT214101","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT214106","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT214104","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT214102","tags":["x_transferred","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/May/17","tags":["x_transferred","Mailing List"]},{"url":"https://support.apple.com/kb/HT214107","tags":["x_transferred","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/May/10","tags":["x_transferred","Mailing List"]},{"url":"https://support.apple.com/kb/HT214102","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT214104","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT214105","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT214106","tags":["x_transferred","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/May/12","tags":["x_transferred","Mailing List"]},{"url":"http://seclists.org/fulldisclosure/2024/May/16","tags":["x_transferred","Mailing List"]},{"url":"https://support.apple.com/kb/HT214101","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27810"},{"url":"https://github.com/advisories/GHSA-h83h-p79w-q64j"}],"sources":{"cve":[{"id":"CVE-2024-27810","description":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.","status":"published","published":"2024-05-13T23:00:55.661Z","modified":"2026-04-02T18:25:17.212Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-28"],"updated_at":"2026-11-02T14:34:12.982241Z"}],"euvd":[{"id":"EUVD-2024-25003","description":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.","status":"published","published":"2024-05-13T23:00:55Z","modified":"2026-04-02T18:25:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:25:17.729131Z"}],"ghsa":[{"id":"GHSA-h83h-p79w-q64j","title":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and...","description":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to read sensitive location information.","status":"published","published":"2024-05-14T15:32:53Z","modified":"2026-04-02T21:32:45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-22","CWE-28"],"updated_at":"2026-11-02T15:07:06.607954Z"}],"nvd":[{"id":"CVE-2024-27810","description":"A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.","status":"published","published":"2024-05-14T15:13:04.267Z","modified":"2026-06-17T07:20:20.933Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-22","CWE-28"],"updated_at":"2026-11-02T14:09:57.497105Z"}]}}