Vulnerability-Lookup

CVE-2024-40825 (GCVE-0-2024-40825)

Vulnerability from cvelistv5 – Published: 2024-09-16 23:23 – Updated: 2026-04-02 18:26

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify the contents of system files.

Severity

6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-17 18:54 UTC

CWE

A malicious app with root privileges may be able to modify the contents of system files
CWE-284 - Improper Access Control

Assigner

apple CNA under the mitre root

CNA scorecard E 37/100 over 992 records in the last 180 days details

References

4 references

URL	Tags
https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121249
http://seclists.org/fulldisclosure/2024/Sep/36
http://seclists.org/fulldisclosure/2024/Sep/33

Impacted products

4 products

Vendor	Product	Version	CPE status
Apple	macOS	Affected: 0 , < 15 (custom)	guessed
Apple	visionOS	Affected: 0 , < 2 (custom)	guessed
apple	macos	Affected: 0 , < 15 (custom) cpe:2.3:o:apple:macos::::::::
apple	visionos	Affected: 0 , < 2 (custom) cpe:2.3:o:apple:visionos::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "macos",
            "vendor": "apple",
            "versions": [
              {
                "lessThan": "15",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "visionos",
            "vendor": "apple",
            "versions": [
              {
                "lessThan": "2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-40825",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-17T18:54:09.983367Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T19:14:31.546Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T16:12:53.165Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify the contents of system files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app with root privileges may be able to modify the contents of system files",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:26:44.669Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121238"
        },
        {
          "url": "https://support.apple.com/en-us/121249"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-40825",
    "datePublished": "2024-09-16T23:23:26.697Z",
    "dateReserved": "2024-07-10T17:11:04.698Z",
    "dateUpdated": "2026-04-02T18:26:44.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-40825",
      "date": "2026-11-01",
      "epss": "0.00221",
      "percentile": "0.12734"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "macOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "15",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "product": "visionOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "product-security@apple.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "macos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "15",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "visionos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E8017C16-A17E-4AE7-9A0B-1295200A3A45",
                    "versionEndExcluding": "15.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A6AE7B0F-C356-4601-9636-617CDD09F009",
                    "versionEndExcluding": "2.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify the contents of system files."
          },
          {
            "lang": "es",
            "value": "El problema se solucion\u00f3 con comprobaciones mejoradas. Este problema se solucion\u00f3 en visionOS 2 y macOS Sequoia 15. Una aplicaci\u00f3n maliciosa con privilegios de superusuario puede modificar el contenido de los archivos del sistema."
          }
        ],
        "id": "CVE-2024-40825",
        "lastModified": "2026-06-17T07:46:39.770",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 4.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 0.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.0,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 0.8,
              "impactScore": 5.2,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-40825",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-17T18:54:09.983367Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-09-17T00:15:48.597",
        "references": [
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121238"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121249"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
          }
        ],
        "sourceIdentifier": "product-security@apple.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-284"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-04-02T22:57:30+00:00",
      "cve": "CVE-2024-40825",
      "id": "CVE-2024-40825",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-40825",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-40825.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-11-04T16:12:53.165Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
              },
              {
                "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "macos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "15",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "visionos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "NONE",
                  "baseScore": 6,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "HIGH",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-40825",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-17T18:54:09.983367Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-284",
                    "description": "CWE-284 Improper Access Control",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-17T18:57:48.463Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "macOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "15",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "product": "visionOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify the contents of system files."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "A malicious app with root privileges may be able to modify the contents of system files",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-02T18:26:44.669Z",
            "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
            "shortName": "apple"
          },
          "references": [
            {
              "url": "https://support.apple.com/en-us/121238"
            },
            {
              "url": "https://support.apple.com/en-us/121249"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "assignerShortName": "apple",
        "cveId": "CVE-2024-40825",
        "datePublished": "2024-09-16T23:23:26.697Z",
        "dateReserved": "2024-07-10T17:11:04.698Z",
        "dateUpdated": "2026-04-02T18:26:44.669Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2024-AVI-0785

Vulnerability from certfr_avis - Published: 2024-09-17 - Updated: 2024-09-17

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	N/A	tvOS versions antérieures à 18
Apple	N/A	visionOS versions antérieures à 2
Apple	iOS	iOS et iPadOS versions antérieures à 18
Apple	iOS	iOS et iPadOS versions antérieures à 17.7
Apple	N/A	Xcode versions antérieures à 16
Apple	macOS	macOS Sonoma versions antérieures à 14.7
Apple	macOS	macOS Sequoia versions antérieures à 15
Apple	macOS	macOS Ventura versions antérieures à 13.7
Apple	Safari	Safari versions antérieures à 18
Apple	N/A	watchOS 11 versions antérieures à 11

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 121238	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121240	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121239	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121246	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121241	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121250	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121234	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121247	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121249	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121248	2024-09-16	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 18",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS\u00a0versions ant\u00e9rieures \u00e0 2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 18",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 17.7",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Xcode versions ant\u00e9rieures \u00e0 16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Ventura versions ant\u00e9rieures \u00e0 13.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 18",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS\u00a011 versions ant\u00e9rieures \u00e0 11",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-44124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44124"
    },
    {
      "name": "CVE-2024-44135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44135"
    },
    {
      "name": "CVE-2024-40837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40837"
    },
    {
      "name": "CVE-2023-5841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5841"
    },
    {
      "name": "CVE-2023-4504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4504"
    },
    {
      "name": "CVE-2024-44191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44191"
    },
    {
      "name": "CVE-2024-40856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40856"
    },
    {
      "name": "CVE-2024-44146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44146"
    },
    {
      "name": "CVE-2024-44181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44181"
    },
    {
      "name": "CVE-2024-40863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40863"
    },
    {
      "name": "CVE-2024-23237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23237"
    },
    {
      "name": "CVE-2024-27879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27879"
    },
    {
      "name": "CVE-2024-44183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44183"
    },
    {
      "name": "CVE-2024-40866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40866"
    },
    {
      "name": "CVE-2024-44184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44184"
    },
    {
      "name": "CVE-2024-40857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40857"
    },
    {
      "name": "CVE-2024-40842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40842"
    },
    {
      "name": "CVE-2024-44131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44131"
    },
    {
      "name": "CVE-2024-44178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44178"
    },
    {
      "name": "CVE-2024-44169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44169"
    },
    {
      "name": "CVE-2024-44202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44202"
    },
    {
      "name": "CVE-2024-41957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41957"
    },
    {
      "name": "CVE-2024-44167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44167"
    },
    {
      "name": "CVE-2024-40844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40844"
    },
    {
      "name": "CVE-2024-27869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27869"
    },
    {
      "name": "CVE-2024-40791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40791"
    },
    {
      "name": "CVE-2024-44189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44189"
    },
    {
      "name": "CVE-2024-44187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44187"
    },
    {
      "name": "CVE-2024-44158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44158"
    },
    {
      "name": "CVE-2024-44171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44171"
    },
    {
      "name": "CVE-2024-44177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44177"
    },
    {
      "name": "CVE-2024-44170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44170"
    },
    {
      "name": "CVE-2024-40825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40825"
    },
    {
      "name": "CVE-2024-40826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40826"
    },
    {
      "name": "CVE-2024-27880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27880"
    },
    {
      "name": "CVE-2024-44188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44188"
    },
    {
      "name": "CVE-2024-40797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40797"
    },
    {
      "name": "CVE-2024-44130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44130"
    },
    {
      "name": "CVE-2024-44132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44132"
    },
    {
      "name": "CVE-2024-39894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39894"
    },
    {
      "name": "CVE-2024-44161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44161"
    },
    {
      "name": "CVE-2024-40847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40847"
    },
    {
      "name": "CVE-2024-40838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40838"
    },
    {
      "name": "CVE-2024-44164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44164"
    },
    {
      "name": "CVE-2024-44186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44186"
    },
    {
      "name": "CVE-2024-44148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44148"
    },
    {
      "name": "CVE-2024-44190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44190"
    },
    {
      "name": "CVE-2024-44133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44133"
    },
    {
      "name": "CVE-2024-27886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27886"
    },
    {
      "name": "CVE-2024-40831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40831"
    },
    {
      "name": "CVE-2024-40845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40845"
    },
    {
      "name": "CVE-2024-40860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40860"
    },
    {
      "name": "CVE-2024-44180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44180"
    },
    {
      "name": "CVE-2024-40848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40848"
    },
    {
      "name": "CVE-2024-44147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44147"
    },
    {
      "name": "CVE-2024-44152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44152"
    },
    {
      "name": "CVE-2024-40843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40843"
    },
    {
      "name": "CVE-2024-44198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44198"
    },
    {
      "name": "CVE-2024-40770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40770"
    },
    {
      "name": "CVE-2024-44139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44139"
    },
    {
      "name": "CVE-2024-44151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44151"
    },
    {
      "name": "CVE-2024-44165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44165"
    },
    {
      "name": "CVE-2024-40850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40850"
    },
    {
      "name": "CVE-2024-44182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44182"
    },
    {
      "name": "CVE-2024-27875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27875"
    },
    {
      "name": "CVE-2024-44149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44149"
    },
    {
      "name": "CVE-2024-27858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27858"
    },
    {
      "name": "CVE-2024-44154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44154"
    },
    {
      "name": "CVE-2024-40840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40840"
    },
    {
      "name": "CVE-2024-27874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27874"
    },
    {
      "name": "CVE-2024-40841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40841"
    },
    {
      "name": "CVE-2024-27876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27876"
    },
    {
      "name": "CVE-2024-40859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40859"
    },
    {
      "name": "CVE-2024-44153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44153"
    },
    {
      "name": "CVE-2024-40846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40846"
    },
    {
      "name": "CVE-2024-40814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40814"
    },
    {
      "name": "CVE-2024-40852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40852"
    },
    {
      "name": "CVE-2024-27795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27795"
    },
    {
      "name": "CVE-2024-40861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40861"
    },
    {
      "name": "CVE-2024-40862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40862"
    },
    {
      "name": "CVE-2024-44128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44128"
    },
    {
      "name": "CVE-2024-44176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44176"
    },
    {
      "name": "CVE-2024-44162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44162"
    },
    {
      "name": "CVE-2024-40830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40830"
    },
    {
      "name": "CVE-2024-40801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40801"
    },
    {
      "name": "CVE-2024-44163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44163"
    },
    {
      "name": "CVE-2024-44129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44129"
    },
    {
      "name": "CVE-2024-27860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27860"
    },
    {
      "name": "CVE-2024-44166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44166"
    },
    {
      "name": "CVE-2024-44168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44168"
    },
    {
      "name": "CVE-2024-44134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44134"
    },
    {
      "name": "CVE-2024-44125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44125"
    },
    {
      "name": "CVE-2024-27861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27861"
    },
    {
      "name": "CVE-2024-44127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44127"
    },
    {
      "name": "CVE-2024-40790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40790"
    },
    {
      "name": "CVE-2024-44160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44160"
    }
  ],
  "initial_release_date": "2024-09-17T00:00:00",
  "last_revision_date": "2024-09-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0785",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-09-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121238",
      "url": "https://support.apple.com/en-us/121238"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121240",
      "url": "https://support.apple.com/en-us/121240"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121239",
      "url": "https://support.apple.com/en-us/121239"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121246",
      "url": "https://support.apple.com/en-us/121246"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121241",
      "url": "https://support.apple.com/en-us/121241"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121250",
      "url": "https://support.apple.com/en-us/121250"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121234",
      "url": "https://support.apple.com/en-us/121234"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121247",
      "url": "https://support.apple.com/en-us/121247"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121249",
      "url": "https://support.apple.com/en-us/121249"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121248",
      "url": "https://support.apple.com/en-us/121248"
    }
  ]
}

FKIE_CVE-2024-40825

Vulnerability from fkie_nvd - Published: 2024-09-17 00:15 - Updated: 2026-06-17 07:46

Severity

4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
6.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify the contents of system files.

References

URL	Tags
product-security@apple.com	https://support.apple.com/en-us/121238	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/121249	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Sep/33
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Sep/36

Impacted products

	Vendor	Product	Version
	apple	macos	*
	apple	visionos	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "product-security@apple.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "macos",
          "vendor": "apple",
          "versions": [
            {
              "lessThan": "15",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "visionos",
          "vendor": "apple",
          "versions": [
            {
              "lessThan": "2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8017C16-A17E-4AE7-9A0B-1295200A3A45",
              "versionEndExcluding": "15.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6AE7B0F-C356-4601-9636-617CDD09F009",
              "versionEndExcluding": "2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify the contents of system files."
    },
    {
      "lang": "es",
      "value": "El problema se solucion\u00f3 con comprobaciones mejoradas. Este problema se solucion\u00f3 en visionOS 2 y macOS Sequoia 15. Una aplicaci\u00f3n maliciosa con privilegios de superusuario puede modificar el contenido de los archivos del sistema."
    }
  ],
  "id": "CVE-2024-40825",
  "lastModified": "2026-06-17T07:46:39.770",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 6.0,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.2,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-40825",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-09-17T18:54:09.983367Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-09-17T00:15:48.597",
  "references": [
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121238"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121249"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-79C6-5CW9-RPWC

Vulnerability from github – Published: 2024-09-17 00:31 – Updated: 2025-11-04 18:31

Details

The issue was addressed with improved checks. This issue is fixed in visionOS 2, macOS Sequoia 15. A malicious app with root privileges may be able to modify the contents of system files.

Severity

6.0 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-40825"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-284"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-09-17T00:15:48Z",
    "severity": "MODERATE"
  },
  "details": "The issue was addressed with improved checks. This issue is fixed in visionOS 2, macOS Sequoia 15. A malicious app with root privileges may be able to modify the contents of system files.",
  "id": "GHSA-79c6-5cw9-rpwc",
  "modified": "2025-11-04T18:31:19Z",
  "published": "2024-09-17T00:31:04Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40825"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121238"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121249"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2024-0381

Vulnerability from csaf_ncscnl - Published: 2024-09-26 08:48 - Updated: 2024-09-26 08:48

Summary

Kwetsbaarheden verholpen in Apple MacOS

Scope

80 vulnerabilities in this advisory, including CVE-2024-40825.

CVE-2024-40825

6.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Known affected: 3 products

Open the full advisory

WID-SEC-W-2024-2154

Vulnerability from csaf_certbund - Published: 2024-09-16 22:00 - Updated: 2025-03-11 23:00

Summary

Apple macOS: Mehrere Schwachstellen

Severity

Hoch

Scope

112 vulnerabilities in this advisory, including CVE-2024-40825.

CVE-2024-40825

Known affected: 3 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-40825 (GCVE-0-2024-40825)

CERTFR-2024-AVI-0785

Solutions

FKIE_CVE-2024-40825

GHSA-79C6-5CW9-RPWC

NCSC-2024-0381

WID-SEC-W-2024-2154

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour