CVE-2024-40774

Published: Jul 29, 2024Modified: Apr 2, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences.

Affected (7)

Products: Apple: Macos, Iphone Os, Ipados, Watchos, Tvos

5 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	Before 12.7.6
Apple Macos	From 13.0 to 13.6.8
Apple Macos	From 14.0 to 14.6

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 17.6

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 17.6

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Apple Watchos	Before 10.6

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Apple Tvos	Before 17.6

References (24)

https://support.apple.com/en-us/120909

Source: product-security@apple.com

https://support.apple.com/en-us/120910

Source: product-security@apple.com

https://support.apple.com/en-us/120911

Source: product-security@apple.com

https://support.apple.com/en-us/120912

Source: product-security@apple.com

https://support.apple.com/en-us/120914

Source: product-security@apple.com

https://support.apple.com/en-us/120916

Source: product-security@apple.com

http://seclists.org/fulldisclosure/2024/Jul/16

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2024/Jul/18

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2024/Jul/19

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2024/Jul/20

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2024/Jul/21

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2024/Jul/22

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://support.apple.com/en-us/HT214117

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT214118

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT214119

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT214120

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT214122

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT214124

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/kb/HT214117

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214118

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214119

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214120

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214122

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214124

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.