Lucene search
AppleCVE-2024-40828HistoryJul 29, 2024 - 11:15 p.m.
CVE-2024-40828
2024-07-2923:15:14
CWE-281
apple
web.nvd.nist.gov
31
macos
privilege escalation
sonoma
monterey
ventura
cve-2024-40828
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.3
Confidence
Low
EPSS
0
Percentile
10.7%
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A malicious app may be able to gain root privileges.
Affected configurations
Node
applemacosRange<13.6
ORapplemacosRange<14.6
ORapplemacosRange<12.7
CNA Affected
[
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "unspecified",
"status": "affected",
"lessThan": "13.6",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "unspecified",
"status": "affected",
"lessThan": "14.6",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "unspecified",
"status": "affected",
"lessThan": "12.7",
"versionType": "custom"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-40828
2024-07-29 22:17:14
cvelist
cvelist
CVE-2024-40828
2024-07-29 22:17:14
nvd
nvd
CVE-2024-40828
2024-07-29 23:15:14
apple
apple
About the security content of macOS Monterey 12.7.6
2024-07-29 00:00:00
About the security content of macOS Ventura 13.6.8
2024-07-29 00:00:00
About the security content of macOS Sonoma 14.6
2024-07-29 00:00:00
openvas
openvas
Apple MacOSX Security Update (HT214118)
2024-07-30 00:00:00
Apple MacOSX Security Update (HT214120)
2024-07-30 00:00:00
Apple MacOSX Security Update (HT214119)
2024-07-30 00:00:00
nessus
nessus
macOS 12.x < 12.7.6 Multiple Vulnerabilities (HT214118)
2024-07-29 00:00:00
macOS 13.x < 13.6.8 Multiple Vulnerabilities (HT214120)
2024-07-29 00:00:00
macOS 13.x < 13.6.8 Multiple Vulnerabilities (120912)
2024-09-13 00:00:00
CVSS3
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.3
Confidence
Low
EPSS
0
Percentile
10.7%
Related for CVE-2024-40828