CVE-2024-27820
highThe issue was addressed with improved memory handling.
Vendor / product: Apple — safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.
CVSS
8.8
8.8 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2024-06-10 21:15
Modified: 2026-11-04 00:17
NVD status: Modified
Last synced 1 day ago
Verified against the source API 2026-11-04 00:25 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
apple / safari <17.5
apple / ipados <16.7.8, ≥17.0 <17.5
apple / iphone_os <16.7.8, ≥17.0 <17.5
apple / macos ≥14.0 <14.5
apple / tvos <17.5
apple / visionos <1.2
apple / watchos <10.5
Weakness classification (CWE)
NVD-CWE-noinfo CWE-119
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: https://support.apple.com/en-us/HT214100
Vendor advisory: https://support.apple.com/en-us/HT214101
Vendor advisory: https://support.apple.com/en-us/HT214102
Vendor advisory: https://support.apple.com/en-us/HT214103
Vendor advisory: https://support.apple.com/en-us/HT214104
Vendor advisory: https://support.apple.com/en-us/HT214106
Vendor advisory: https://support.apple.com/en-us/HT214108
References
- https://support.apple.com/en-us/120896 product-security@apple.com
- https://support.apple.com/en-us/120898 product-security@apple.com
- https://support.apple.com/en-us/120901 product-security@apple.com
- https://support.apple.com/en-us/120902 product-security@apple.com
- https://support.apple.com/en-us/120903 product-security@apple.com
- https://support.apple.com/en-us/120905 product-security@apple.com
- https://support.apple.com/en-us/120906 product-security@apple.com
- http://seclists.org/fulldisclosure/2024/Jun/5 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214100 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214101 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214102 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214103 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214104 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214106 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/en-us/HT214108 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214100 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214102 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214104 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214106 af854a3a-2127-422b-91ae-364da2661108
- https://support.apple.com/kb/HT214108 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-11-04 00:25 UTC · record ↗