CVEvulnerability
CVE-2024-40821
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-281
Description
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions.
Affected configurations
• apple macos (>= 12.0 < 12.7.6)
• apple macos (>= 13.0 < 13.6.8)
• apple macos (>= 14.0 < 14.6)
Related
Weakness · CWE (1)
- CWE-281 Improper Preservation of Permissions weakness
References
- https://support.apple.com/en-us/120910 support.apple.com
- https://support.apple.com/en-us/120911 support.apple.com
- https://support.apple.com/en-us/120912 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List
- http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List
- http://seclists.org/fulldisclosure/2024/Jul/20 Mailing List
- https://support.apple.com/en-us/HT214118 Vendor Advisory
- https://support.apple.com/en-us/HT214119 Vendor Advisory
- https://support.apple.com/en-us/HT214120 Vendor Advisory
- https://support.apple.com/kb/HT214118 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com
- https://support.apple.com/kb/HT214120 support.apple.com