CVEvulnerability
CVE-2024-40835
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to use sensitive data with certain actions without prompting the user.
Affected configurations
• apple ipados (< 16.7.9)
• apple ipados (>= 17.0 < 17.6)
• apple iphone os (< 16.7.9)
• apple iphone os (>= 17.0 < 17.6)
• apple macos (< 12.7.6)
• apple macos (>= 13.0 < 13.6.8)
• apple macos (>= 14.0 < 14.6)
• apple watchos (< 10.6)
References
- https://support.apple.com/en-us/120908 support.apple.com
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120910 support.apple.com
- https://support.apple.com/en-us/120911 support.apple.com
- https://support.apple.com/en-us/120912 support.apple.com
- https://support.apple.com/en-us/120916 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/17 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/20 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214116 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214118 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214119 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214120 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214124 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214116 support.apple.com
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214118 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com
- https://support.apple.com/kb/HT214120 support.apple.com
- https://support.apple.com/kb/HT214124 support.apple.com