CVE-2024-27808 is a memory handling vulnerability in Apple Safari that may lead to arbitrary code execution when processing web content. This vulnerability affects Safari 17.5 and corresponding OS versions including iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, and watchOS 10.5. The issue was resolved by Apple through improved memory handling techniques. The CVSS 3.1 vector indicates the attack requires network access, has high complexity, no privileges required, requires user interaction, and impacts confidentiality, integrity, and availability with high severity. Apple’s official security advisories confirm the fix is included in the stated OS and Safari versions released on May 13, 2024. No active exploitation has been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code within the context of the Safari browser by processing crafted web content. This could lead to full compromise of the affected system’s confidentiality, integrity, and availability. The CVSS score of 7.5 reflects the high impact potential. However, no known exploits in the wild have been reported, reducing immediate risk. The vulnerability affects multiple Apple platforms and devices running the specified OS and Safari versions prior to the patch.

Apple has released official patches addressing CVE-2024-27808 in Safari 17.5 and OS updates iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, and watchOS 10.5. Users and administrators should apply these updates promptly to remediate the vulnerability. Since the vendor advisory confirms the issue is fixed in these versions, no additional mitigations are required beyond updating to the fixed releases.