7.8

CVE-2024-40809

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, visionOS 1.3, macOS Sonoma 14.6. A shortcut may be able to bypass Internet permission requirements.

Data is provided by the National Vulnerability Database (NVD)
AppleiPadOS Version < 16.7.9
AppleiPadOS Version >= 17.0 < 17.6
AppleiPhone OS Version < 16.7.9
AppleiPhone OS Version >= 17.0 < 17.6
ApplemacOS Version < 12.7.6
ApplemacOS Version >= 13.0 < 13.6.8
ApplemacOS Version >= 14.0 < 14.6
ApplevisionOS Version < 1.3
ApplewatchOS Version < 10.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.029
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
http://seclists.org/fulldisclosure/2024/Jul/18
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Jul/16
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Jul/17
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Jul/19
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Jul/20
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Jul/21
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Jul/23
Third Party Advisory
Mailing List
https://support.apple.com/en-us/HT214118
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214120
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214123
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214119
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214117
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214124
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214116
Vendor Advisory
Release Notes