← back
CVE-2024-40863

CVE-2024-40863

CVSS 5.5 MEDIUMEPSS 0.2%CWE-200
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.5EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
16 Sep 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to leak sensitive user information.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Apple · iOS and iPadOS