CVE-2024-27792 is a vulnerability in Apple macOS that could allow an application to access sensitive user data without adequate user consent. The issue stems from insufficient access control mechanisms, which Apple addressed by adding an additional user consent prompt in macOS Sonoma 14.4. This update improves privacy by ensuring that apps cannot silently access sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5, reflecting medium severity with local attack vector, low attack complexity, no privileges required, and user interaction required. The vendor advisory confirms the issue is fixed in macOS Sonoma 14.4.

An unprivileged app could potentially access sensitive user data without proper authorization, which may lead to privacy violations. However, exploitation requires local access and user interaction. There are no reports of active exploitation in the wild. The impact is limited to confidentiality, with no integrity or availability effects reported.

Apply the official update macOS Sonoma 14.4 or later, which includes the fix for this vulnerability by adding an additional user consent prompt. No further action is required if the system is already updated to this version or later. Users should ensure their macOS installations are kept current to benefit from this and other security improvements.