CVEvulnerability
CVE-2024-40794
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-287
Description
This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication.
Affected configurations
• apple safari (< 17.6)
• apple ipados (< 17.6)
• apple iphone os (< 17.6)
• apple macos (< 14.6)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120911 support.apple.com
- https://support.apple.com/en-us/120913 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/15 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00006.html lists.debian.org
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214119 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214121 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com
- https://support.apple.com/kb/HT214121 support.apple.com