CVE-2024-40858

🗓️ 02 Apr 2026 18:20:41Reported by appleType

A permissions issue could allow apps to access Contacts without user consent; fixed in macOS Sequoia 15.1.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-40858	2 Apr 202621:37	–	circl
CVE	CVE-2024-40858	2 Apr 202618:20	–	cve
EUVD	EUVD-2024-55523	2 Apr 202621:32	–	euvd
Tenable Nessus	macOS 15.x < 15.1 Multiple Vulnerabilities (121564)	21 Nov 202400:00	–	nessus
NCSC	Vulnerabilities fixed in Apple macOS	30 Oct 202411:26	–	ncsc
NVD	CVE-2024-40858	2 Apr 202619:17	–	nvd
OpenVAS	Apple MacOSX Security Update (HT121564)	1 Sep 202500:00	–	openvas
Positive Technologies	PT-2024-41823	28 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-40858	3 Apr 202623:02	–	redhatcve
Vulnrichment	CVE-2024-40858	2 Apr 202618:20	–	vulnrichment

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "15.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/en-us/121564

02 Apr 2026 18:20Current

EPSS0.00172