← back
CVE-2024-40855

CVE-2024-40855

CVSS 5.5 MEDIUMEPSS 0.2%CWE-863
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
28 Oct 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2. A sandboxed app may be able to access sensitive user data.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Apple · macOSApple · visionOS
References
http://seclists.org/fulldisclosure/2024/Oct/12http://seclists.org/fulldisclosure/2024/Oct/13https://support.apple.com/en-us/121238https://support.apple.com/en-us/121249https://support.apple.com/en-us/121568https://support.apple.com/en-us/121570