CVE-2024-27827 is a medium severity vulnerability affecting Apple macOS Sonoma 14.5 and Ventura 13.6.7, where an application may exploit improper state management to read arbitrary files on the system. This vulnerability is categorized under CWE-22, indicating a path traversal or directory traversal issue. Apple addressed the vulnerability by improving state management to prevent unauthorized file access. The CVSS vector indicates the attack requires local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and impacts confidentiality with high severity (C:H). Official patches are available from Apple as part of the stated macOS updates.

An attacker with local access to a vulnerable macOS system could exploit this vulnerability to read arbitrary files, potentially exposing sensitive information. The impact is limited to confidentiality as there is no indication of integrity or availability impact. No known exploits have been reported in the wild. The vulnerability could allow unauthorized disclosure of data stored on the affected system.

Apple has released official security updates that address this vulnerability in macOS Sonoma 14.5 and macOS Ventura 13.6.7. Users and administrators should apply these updates promptly to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.