CVE-2024-27850 is a vulnerability in Apple Safari where a maliciously crafted webpage may be able to fingerprint users, potentially compromising user privacy. The underlying issue was mitigated by improvements to the noise injection algorithm used by Safari to prevent fingerprinting. This vulnerability is fixed in Safari 17.5 and corresponding OS updates (iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2). The CVSS v3.1 score is 6.5 (medium severity) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There are no known exploits in the wild. The vendor advisory confirms the availability of official fixes.

The vulnerability allows a remote attacker who can lure a user to a malicious webpage to fingerprint the user, which can impact user privacy by enabling tracking or profiling. There is no direct confidentiality or availability impact reported. The integrity impact is rated high, indicating potential manipulation or inference of user-related data. No known active exploitation has been reported.

Apple has released official patches addressing this vulnerability in Safari 17.5, iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5, and visionOS 1.2. Users and administrators should apply these updates promptly to mitigate the risk. No additional mitigation actions are specified or required beyond applying the official updates.