CVEvulnerability
CVE-2024-40774
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.9 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Description
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences.
Affected configurations
• apple macos (< 12.7.6)
• apple macos (>= 13.0 < 13.6.8)
• apple macos (>= 14.0 < 14.6)
• apple iphone os (< 17.6)
• apple ipados (< 17.6)
• apple watchos (< 10.6)
• apple tvos (< 17.6)
References
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120910 support.apple.com
- https://support.apple.com/en-us/120911 support.apple.com
- https://support.apple.com/en-us/120912 support.apple.com
- https://support.apple.com/en-us/120914 support.apple.com
- https://support.apple.com/en-us/120916 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/20 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/22 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214118 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214119 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214120 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214122 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214124 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214118 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com
- https://support.apple.com/kb/HT214120 support.apple.com
- https://support.apple.com/kb/HT214122 support.apple.com
- https://support.apple.com/kb/HT214124 support.apple.com