Lucene search
HistorySep 17, 2024 - 12:15 a.m.
CVE-2024-40797
cve-2024-40797
state management
user interface spoofing
macos ventura
macos sonoma
macos sequoia
malicious website
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.3%
This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. Visiting a malicious website may lead to user interface spoofing.
Affected configurations
Node
applemacosRange<13.7
ORapplemacosRange14.0–14.7
Related
cvelist
cvelist
CVE-2024-40797
2024-09-16 23:22:17
vulnrichment
vulnrichment
CVE-2024-40797
2024-09-16 23:22:17
cve
cve
CVE-2024-40797
2024-09-17 00:15:48
nessus
nessus
macOS 13.x < 13.7 Multiple Vulnerabilities (121234)
2024-09-16 00:00:00
macOS 14.x < 14.7 Multiple Vulnerabilities (121247)
2024-09-16 00:00:00
openvas
openvas
Apple MacOSX Security Update (HT121234)
2024-09-20 00:00:00
Apple MacOSX Security Update (HT121247)
2024-09-20 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.3%
Related for NVD:CVE-2024-40797