CVE-2024-40812

2024-07-2923:15:13

[email protected]

web.nvd.nist.gov

cve-2024-40812

logic issue improved checks

ios 16.7.9

ipados 16.7.9

macos ventura 13.6.8

macos monterey 12.7.6

ios 17.6

ipados 17.6

watchos 10.6

visionos 1.3

macos sonoma 14.6

shortcut bypass internet permission

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

10.6%

JSON

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, visionOS 1.3, macOS Sonoma 14.6. A shortcut may be able to bypass Internet permission requirements.

Affected configurations

Nvd

Node

appleipadosRange<16.7.9

appleipadosRange17.0–17.6

appleiphone_osRange<16.7.9

appleiphone_osRange17.0–17.6

applemacosRange<12.7.6

applemacosRange14.0–14.6

applevisionosRange<1.3

applewatchosRange<10.6

VendorProductVersionCPE
appleipados*cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
applevisionos*cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
applewatchos*cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	ipados	*	cpe:2.3:o:apple:ipados::::::::
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::
apple	macos	*	cpe:2.3:o:apple:macos::::::::
apple	visionos	*	cpe:2.3:o:apple:visionos::::::::
apple	watchos	*	cpe:2.3:o:apple:watchos::::::::