Lucene search
HistorySep 17, 2024 - 12:15 a.m.
CVE-2024-40838
privacy issue
macos sequoia
sensitive data
protected location
malicious app
notifications
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0
Percentile
13.4%
A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15. A malicious app may be able to access notifications from the user’s device.
Affected configurations
Node
applemacosRange<15.0
References
Related
cve
cve
CVE-2024-40838
2024-09-17 00:15:48
cvelist
cvelist
CVE-2024-40838
2024-09-16 23:22:55
vulnrichment
vulnrichment
CVE-2024-40838
2024-09-16 23:22:55
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0
Percentile
13.4%
Related for NVD:CVE-2024-40838