Vulnerability-Lookup

CVE-2024-40783 (GCVE-0-2024-40783)

Vulnerability from cvelistv5 – Published: 2024-07-29 22:17 – Updated: 2026-04-02 18:24

Summary

The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A malicious application may be able to bypass Privacy preferences.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-30 18:44 UTC

CWE

A malicious application may be able to bypass Privacy preferences
CWE-285 - Improper Authorization

Assigner

apple mitre root

References

12 references

URL	Tags
https://support.apple.com/en-us/120910
https://support.apple.com/en-us/120911
https://support.apple.com/en-us/120912
https://support.apple.com/en-us/HT214120	x_transferred
https://support.apple.com/en-us/HT214119	x_transferred
https://support.apple.com/en-us/HT214118	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/20	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/18	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/19	x_transferred
https://support.apple.com/kb/HT214120
https://support.apple.com/kb/HT214119
https://support.apple.com/kb/HT214118

Impacted products

2 products

Vendor	Product	Version	CPE status
Apple	macOS	Affected: 0 , < 12.7.6 (custom) Affected: 0 , < 13.6.8 (custom) Affected: 0 , < 14.6 (custom)	guessed
apple	macos	Affected: 13.0 , < 13.6 (custom) Affected: 14.0 , < 14.6 (custom) Affected: 12.0 , < 12.7 (custom) cpe:2.3:o:apple:macos::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "macos",
            "vendor": "apple",
            "versions": [
              {
                "lessThan": "13.6",
                "status": "affected",
                "version": "13.0",
                "versionType": "custom"
              },
              {
                "lessThan": "14.6",
                "status": "affected",
                "version": "14.0",
                "versionType": "custom"
              },
              {
                "lessThan": "12.7",
                "status": "affected",
                "version": "12.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-40783",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-30T18:44:08.664467Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-285",
                "description": "CWE-285 Improper Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-30T19:29:23.452Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T17:23:11.810Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214120"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214119"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214118"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/20"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/19"
          },
          {
            "url": "https://support.apple.com/kb/HT214120"
          },
          {
            "url": "https://support.apple.com/kb/HT214119"
          },
          {
            "url": "https://support.apple.com/kb/HT214118"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.7.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "13.6.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A malicious application may be able to bypass Privacy preferences."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious application may be able to bypass Privacy preferences",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:24:09.679Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/120910"
        },
        {
          "url": "https://support.apple.com/en-us/120911"
        },
        {
          "url": "https://support.apple.com/en-us/120912"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-40783",
    "datePublished": "2024-07-29T22:17:13.993Z",
    "dateReserved": "2024-07-10T17:11:04.688Z",
    "dateUpdated": "2026-04-02T18:24:09.679Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-40783",
      "date": "2026-09-20",
      "epss": "0.00312",
      "percentile": "0.24273"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "macOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "12.7.6",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "13.6.8",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "14.6",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "product-security@apple.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "macos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "13.6",
                    "status": "affected",
                    "version": "13.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "14.6",
                    "status": "affected",
                    "version": "14.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "12.7",
                    "status": "affected",
                    "version": "12.0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EA924D87-8FAE-4E34-83F7-A5E25C7450E5",
                    "versionEndExcluding": "12.7.6",
                    "versionStartIncluding": "12.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7008225C-B5B9-4F87-9392-DD2080717E9A",
                    "versionEndExcluding": "13.6.8",
                    "versionStartIncluding": "13.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "51E2E93B-C5A3-4C83-B806-2EC555AD45FE",
                    "versionEndExcluding": "14.6",
                    "versionStartIncluding": "14.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A malicious application may be able to bypass Privacy preferences."
          },
          {
            "lang": "es",
            "value": " El problema se solucion\u00f3 mejorando la restricci\u00f3n del acceso a los contenedores de datos. Este problema se solucion\u00f3 en macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. Es posible que una aplicaci\u00f3n maliciosa pueda omitir las preferencias de privacidad."
          }
        ],
        "id": "CVE-2024-40783",
        "lastModified": "2026-06-17T07:46:32.263",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.2,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-40783",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-30T18:44:08.664467Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-07-29T23:15:11.853",
        "references": [
          {
            "source": "product-security@apple.com",
            "url": "https://support.apple.com/en-us/120910"
          },
          {
            "source": "product-security@apple.com",
            "url": "https://support.apple.com/en-us/120911"
          },
          {
            "source": "product-security@apple.com",
            "url": "https://support.apple.com/en-us/120912"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/19"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/20"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/HT214118"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/HT214119"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/HT214120"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://support.apple.com/kb/HT214118"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://support.apple.com/kb/HT214119"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://support.apple.com/kb/HT214120"
          }
        ],
        "sourceIdentifier": "product-security@apple.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-285"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-04-02T22:57:05+00:00",
      "cve": "CVE-2024-40783",
      "id": "CVE-2024-40783",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-40783",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-40783.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-11-04T17:23:11.810Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://support.apple.com/en-us/HT214120"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://support.apple.com/en-us/HT214119"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://support.apple.com/en-us/HT214118"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "http://seclists.org/fulldisclosure/2024/Jul/20"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "http://seclists.org/fulldisclosure/2024/Jul/19"
              },
              {
                "url": "https://support.apple.com/kb/HT214120"
              },
              {
                "url": "https://support.apple.com/kb/HT214119"
              },
              {
                "url": "https://support.apple.com/kb/HT214118"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "macos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "13.6",
                    "status": "affected",
                    "version": "13.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "14.6",
                    "status": "affected",
                    "version": "14.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "12.7",
                    "status": "affected",
                    "version": "12.0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "NONE",
                  "baseScore": 7.1,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "REQUIRED",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-40783",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-07-30T18:44:08.664467Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-285",
                    "description": "CWE-285 Improper Authorization",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-07-30T18:48:11.325Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "macOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "12.7.6",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "13.6.8",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "14.6",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A malicious application may be able to bypass Privacy preferences."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "A malicious application may be able to bypass Privacy preferences",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-02T18:24:09.679Z",
            "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
            "shortName": "apple"
          },
          "references": [
            {
              "url": "https://support.apple.com/en-us/120910"
            },
            {
              "url": "https://support.apple.com/en-us/120911"
            },
            {
              "url": "https://support.apple.com/en-us/120912"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "assignerShortName": "apple",
        "cveId": "CVE-2024-40783",
        "datePublished": "2024-07-29T22:17:13.993Z",
        "dateReserved": "2024-07-10T17:11:04.688Z",
        "dateUpdated": "2026-04-02T18:24:09.679Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2024-AVI-0634

Vulnerability from certfr_avis - Published: 2024-07-30 - Updated: 2024-07-30

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Apple indique que la vulnérabilité CVE-2024-23296 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	N/A	macOS Monterey versions antérieures à 12.7.6
Apple	N/A	iOS et iPadOS versions antérieures à 17.6
Apple	N/A	macOS Ventura versions antérieures à 13.6.8
Apple	N/A	visionOS versions antérieures à 1.3
Apple	N/A	tvOS versions antérieures à 17.6
Apple	N/A	iOS et iPadOS versions antérieures à 16.7.9
Apple	N/A	watchOS versions antérieures à 10.6
Apple	N/A	Safari versions antérieures à 17.6
Apple	N/A	macOS Sonoma versions antérieures à 14.6

References

Title

Publication Time

Tags

Bulletin de sécurité Apple HT214119	2024-07-29	vendor-advisory
Bulletin de sécurité Apple HT214117	2024-07-29	vendor-advisory
Bulletin de sécurité Apple HT214123	2024-07-29	vendor-advisory
Bulletin de sécurité Apple HT214120	2024-07-29	vendor-advisory
Bulletin de sécurité Apple HT214124	2024-07-29	vendor-advisory
Bulletin de sécurité Apple HT214118	2024-07-29	vendor-advisory
Bulletin de sécurité Apple HT214121	2024-07-29	vendor-advisory
Bulletin de sécurité Apple HT214116	2024-07-29	vendor-advisory
Bulletin de sécurité Apple HT214122	2024-07-29	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "macOS Monterey versions ant\u00e9rieures \u00e0 12.7.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 17.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Ventura versions ant\u00e9rieures \u00e0 13.6.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 1.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 17.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 16.7.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 10.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 17.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-24795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-24795"
    },
    {
      "name": "CVE-2023-52356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52356"
    },
    {
      "name": "CVE-2024-40824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40824"
    },
    {
      "name": "CVE-2023-27952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27952"
    },
    {
      "name": "CVE-2024-27823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27823"
    },
    {
      "name": "CVE-2024-40779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40779"
    },
    {
      "name": "CVE-2023-38709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
    },
    {
      "name": "CVE-2024-40794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40794"
    },
    {
      "name": "CVE-2024-40813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40813"
    },
    {
      "name": "CVE-2024-27316",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27316"
    },
    {
      "name": "CVE-2024-40793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40793"
    },
    {
      "name": "CVE-2024-40781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40781"
    },
    {
      "name": "CVE-2024-40818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40818"
    },
    {
      "name": "CVE-2024-40816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40816"
    },
    {
      "name": "CVE-2024-40804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40804"
    },
    {
      "name": "CVE-2024-40817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40817"
    },
    {
      "name": "CVE-2024-23296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23296"
    },
    {
      "name": "CVE-2024-2466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2466"
    },
    {
      "name": "CVE-2024-40827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40827"
    },
    {
      "name": "CVE-2024-27804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27804"
    },
    {
      "name": "CVE-2024-40785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40785"
    },
    {
      "name": "CVE-2024-40777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40777"
    },
    {
      "name": "CVE-2024-40776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40776"
    },
    {
      "name": "CVE-2024-40798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40798"
    },
    {
      "name": "CVE-2023-6277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6277"
    },
    {
      "name": "CVE-2024-27871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27871"
    },
    {
      "name": "CVE-2024-40815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40815"
    },
    {
      "name": "CVE-2024-27872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27872"
    },
    {
      "name": "CVE-2024-23261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23261"
    },
    {
      "name": "CVE-2024-40789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40789"
    },
    {
      "name": "CVE-2024-40834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40834"
    },
    {
      "name": "CVE-2024-40809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40809"
    },
    {
      "name": "CVE-2024-27873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27873"
    },
    {
      "name": "CVE-2024-27878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27878"
    },
    {
      "name": "CVE-2024-40784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40784"
    },
    {
      "name": "CVE-2024-40823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40823"
    },
    {
      "name": "CVE-2024-2379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2379"
    },
    {
      "name": "CVE-2024-40812",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40812"
    },
    {
      "name": "CVE-2024-40774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40774"
    },
    {
      "name": "CVE-2024-2004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2004"
    },
    {
      "name": "CVE-2024-40796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40796"
    },
    {
      "name": "CVE-2024-40828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40828"
    },
    {
      "name": "CVE-2024-27862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27862"
    },
    {
      "name": "CVE-2024-27826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27826"
    },
    {
      "name": "CVE-2024-40836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40836"
    },
    {
      "name": "CVE-2024-2398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2398"
    },
    {
      "name": "CVE-2024-27883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27883"
    },
    {
      "name": "CVE-2024-40788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40788"
    },
    {
      "name": "CVE-2024-40782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40782"
    },
    {
      "name": "CVE-2024-40822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40822"
    },
    {
      "name": "CVE-2024-27877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27877"
    },
    {
      "name": "CVE-2024-40780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40780"
    },
    {
      "name": "CVE-2024-27882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27882"
    },
    {
      "name": "CVE-2024-40805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40805"
    },
    {
      "name": "CVE-2024-40829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40829"
    },
    {
      "name": "CVE-2024-40835",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40835"
    },
    {
      "name": "CVE-2024-40786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40786"
    },
    {
      "name": "CVE-2024-40833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40833"
    },
    {
      "name": "CVE-2024-40806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40806"
    },
    {
      "name": "CVE-2024-40778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40778"
    },
    {
      "name": "CVE-2024-40814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40814"
    },
    {
      "name": "CVE-2024-40783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40783"
    },
    {
      "name": "CVE-2024-40807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40807"
    },
    {
      "name": "CVE-2024-40832",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40832"
    },
    {
      "name": "CVE-2024-27863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27863"
    },
    {
      "name": "CVE-2024-40803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40803"
    },
    {
      "name": "CVE-2024-40811",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40811"
    },
    {
      "name": "CVE-2024-6387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6387"
    },
    {
      "name": "CVE-2024-40775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40775"
    },
    {
      "name": "CVE-2024-27881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27881"
    },
    {
      "name": "CVE-2024-4558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-4558"
    },
    {
      "name": "CVE-2024-40787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40787"
    },
    {
      "name": "CVE-2024-40821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40821"
    },
    {
      "name": "CVE-2024-40802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40802"
    },
    {
      "name": "CVE-2024-40800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40800"
    },
    {
      "name": "CVE-2024-40795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40795"
    },
    {
      "name": "CVE-2024-40799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40799"
    }
  ],
  "initial_release_date": "2024-07-30T00:00:00",
  "last_revision_date": "2024-07-30T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0634",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nApple indique que la vuln\u00e9rabilit\u00e9 CVE-2024-23296 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214119",
      "url": "https://support.apple.com/kb/HT214119"
    },
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214117",
      "url": "https://support.apple.com/kb/HT214117"
    },
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214123",
      "url": "https://support.apple.com/kb/HT214123"
    },
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214120",
      "url": "https://support.apple.com/kb/HT214120"
    },
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214124",
      "url": "https://support.apple.com/kb/HT214124"
    },
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214118",
      "url": "https://support.apple.com/kb/HT214118"
    },
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214121",
      "url": "https://support.apple.com/kb/HT214121"
    },
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214116",
      "url": "https://support.apple.com/kb/HT214116"
    },
    {
      "published_at": "2024-07-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT214122",
      "url": "https://support.apple.com/kb/HT214122"
    }
  ]
}

FKIE_CVE-2024-40783

Vulnerability from fkie_nvd - Published: 2024-07-29 23:15 - Updated: 2026-06-17 07:46

Severity

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Summary

References

URL	Tags
product-security@apple.com	https://support.apple.com/en-us/120910
product-security@apple.com	https://support.apple.com/en-us/120911
product-security@apple.com	https://support.apple.com/en-us/120912
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/18	Mailing List
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/19	Mailing List
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/20	Mailing List
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214118	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214119	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214120	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214118
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214119
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214120

Impacted products

Vendor	Product	Version
apple	macos	*
apple	macos	*
apple	macos	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.7.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "13.6.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "product-security@apple.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "macos",
          "vendor": "apple",
          "versions": [
            {
              "lessThan": "13.6",
              "status": "affected",
              "version": "13.0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.6",
              "status": "affected",
              "version": "14.0",
              "versionType": "custom"
            },
            {
              "lessThan": "12.7",
              "status": "affected",
              "version": "12.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA924D87-8FAE-4E34-83F7-A5E25C7450E5",
              "versionEndExcluding": "12.7.6",
              "versionStartIncluding": "12.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7008225C-B5B9-4F87-9392-DD2080717E9A",
              "versionEndExcluding": "13.6.8",
              "versionStartIncluding": "13.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "51E2E93B-C5A3-4C83-B806-2EC555AD45FE",
              "versionEndExcluding": "14.6",
              "versionStartIncluding": "14.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A malicious application may be able to bypass Privacy preferences."
    },
    {
      "lang": "es",
      "value": " El problema se solucion\u00f3 mejorando la restricci\u00f3n del acceso a los contenedores de datos. Este problema se solucion\u00f3 en macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. Es posible que una aplicaci\u00f3n maliciosa pueda omitir las preferencias de privacidad."
    }
  ],
  "id": "CVE-2024-40783",
  "lastModified": "2026-06-17T07:46:32.263",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-40783",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-07-30T18:44:08.664467Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-07-29T23:15:11.853",
  "references": [
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120910"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120911"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120912"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/19"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/20"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214119"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214120"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214119"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214120"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-5Q29-HV3V-HV52

Vulnerability from github – Published: 2024-07-30 00:34 – Updated: 2026-04-02 21:31

Details

The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A malicious application may be able to bypass Privacy preferences.

Severity

7.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-40783"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-285"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-07-29T23:15:11Z",
    "severity": "HIGH"
  },
  "details": "The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A malicious application may be able to bypass Privacy preferences.",
  "id": "GHSA-5q29-hv3v-hv52",
  "modified": "2026-04-02T21:31:48Z",
  "published": "2024-07-30T00:34:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40783"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120910"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120911"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120912"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214118"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214119"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214120"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214118"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214119"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214120"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/19"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/20"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2024-0320

Vulnerability from csaf_ncscnl - Published: 2024-07-30 08:42 - Updated: 2024-07-30 08:42

Summary

Kwetsbaarheden verholpen in Apple MacOS

Scope

74 vulnerabilities in this advisory, including CVE-2024-40783.

CVE-2024-40783

Open the full advisory

WID-SEC-W-2024-1725

Vulnerability from csaf_certbund - Published: 2024-07-29 22:00 - Updated: 2026-01-11 23:00

Summary

Apple macOS: Mehrere Schwachstellen

Severity

Hoch

Scope

85 vulnerabilities in this advisory, including CVE-2024-40783.

CVE-2024-40783

Known affected: 4 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-40783 (GCVE-0-2024-40783)

CERTFR-2024-AVI-0634

Solutions

FKIE_CVE-2024-40783

GHSA-5Q29-HV3V-HV52

NCSC-2024-0320

WID-SEC-W-2024-1725

Tags

Sightings

Nomenclature

Related by attack behaviour