CVE-2024-27801 is a vulnerability in Apple’s iOS, iPadOS, and macOS Sonoma operating systems that could allow a malicious app to elevate its privileges. The root cause is insufficient validation checks that were improved in the security updates released in May 2024 (iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5). This vulnerability is one of many addressed in these updates, which include fixes for issues such as arbitrary code execution, kernel privilege escalation, and unauthorized data access. The vulnerability has a CVSS v3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating that it requires local access but can lead to full system compromise without user interaction.

If exploited, this vulnerability could allow a local app to elevate its privileges, potentially leading to unauthorized access to sensitive data, execution of arbitrary code with kernel privileges, and full compromise of the affected device’s confidentiality, integrity, and availability. The CVSS score of 8.4 reflects a high impact on system security. However, there are no known exploits in the wild at the time of this advisory.

Apple has released official security updates that address this vulnerability in iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5. Users and administrators should apply these updates promptly to mitigate the risk. Since this is a local privilege escalation vulnerability, ensuring devices are updated reduces the attack surface. No additional mitigations are specified by Apple beyond applying the official patches.