CVE-2024-27813 describes a vulnerability in macOS where an application may execute arbitrary code outside its sandbox or with elevated privileges due to insufficient checks. Apple resolved this issue by implementing improved validation and checks in macOS Sonoma 14.5. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity, with attack vector local, low attack complexity, low privileges required, and no user interaction needed. The fix is officially released by Apple in macOS Sonoma 14.5.

If exploited, a local attacker with low privileges could execute arbitrary code outside the app sandbox or with elevated privileges, potentially compromising system integrity and confidentiality. The impact includes limited confidentiality, integrity, and availability consequences as indicated by the CVSS vector. There are no reports of active exploitation in the wild.

Apple has released an official fix for this vulnerability in macOS Sonoma 14.5. Users and administrators should update affected macOS systems to version 14.5 or later to remediate this issue. Since the vendor advisory confirms the fix, no additional mitigation steps are required beyond applying the update.