Lucene search
HistorySep 17, 2024 - 12:15 a.m.
CVE-2024-40842
macos sequoia
validation
user-sensitive data
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.6%
An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data.
Affected configurations
Node
applemacosRange<15.0
References
Related
vulnrichment
vulnrichment
CVE-2024-40842
2024-09-16 23:23:09
cvelist
cvelist
CVE-2024-40842
2024-09-16 23:23:09
cve
cve
CVE-2024-40842
2024-09-17 00:15:49
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2024-40842