CVE-2024-27841 is a memory handling vulnerability in Apple’s kernel affecting iOS, iPadOS, and macOS Sonoma. An application could exploit this flaw to disclose kernel memory, potentially exposing sensitive system information. The issue was resolved by Apple through improved memory handling techniques in the security updates released on May 13, 2024, specifically iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5. This vulnerability is part of a broader set of security fixes addressing multiple kernel and system component issues. The CVSS v3.1 score of 9.8 reflects the vulnerability’s critical impact with network attack vector, no required privileges or user interaction, and full confidentiality, integrity, and availability impact.

An attacker could exploit this vulnerability to disclose kernel memory, potentially revealing sensitive information that could aid further attacks. The CVSS score of 9.8 indicates critical impact affecting confidentiality, integrity, and availability. There are no reports of active exploitation in the wild. The vulnerability could allow unauthorized access to kernel memory, which is a significant security risk on affected Apple devices.

Apple has released official patches addressing this vulnerability in iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5. Users and administrators should apply these updates promptly to mitigate the risk. Since this is a client-side OS vulnerability, updating the device OS is the primary and recommended mitigation. No additional vendor-recommended mitigations or workarounds are indicated in the advisory.