Lucene search
HistoryJul 29, 2024 - 11:15 p.m.
CVE-2024-40814
downgrade issue
code-signing restrictions
macos sonoma 14.6
privacy preferences
cve-2024-40814
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS
0
Percentile
9.4%
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.6. An app may be able to bypass Privacy preferences.
Related
cve
cve
CVE-2024-40814
2024-07-29 23:15:13
cvelist
cvelist
CVE-2024-40814
2024-07-29 22:16:54
vulnrichment
vulnrichment
CVE-2024-40814
2024-07-29 22:16:54
openvas
openvas
Apple MacOSX Security Update (HT121234)
2024-09-20 00:00:00
Apple MacOSX Security Update (HT214119)
2024-07-30 00:00:00
nessus
nessus
macOS 13.x < 13.7 Multiple Vulnerabilities (121234)
2024-09-16 00:00:00
macOS 14.x < 14.6 Multiple Vulnerabilities (120911)
2024-09-13 00:00:00
macOS 14.x < 14.6 Multiple Vulnerabilities (HT214119)
2024-07-29 00:00:00
apple
apple
About the security content of macOS Sonoma 14.6
2024-07-29 00:00:00
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS
0
Percentile
9.4%
Related for NVD:CVE-2024-40814