CVEvulnerability
CVE-2024-40786
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-284
Description
This issue was addressed through improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8. An attacker may be able to view sensitive user information.
Affected configurations
• apple ipados (< 16.7.9)
• apple ipados (>= 17.0 < 17.6)
• apple iphone os (< 16.7.9)
• apple iphone os (>= 17.0 < 17.6)
• apple macos (< 13.6.8)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.apple.com/en-us/120908 support.apple.com
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120912 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/17 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214116 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214120 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214116 support.apple.com
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214120 support.apple.com