A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, macOS Sonoma 14.6. A shortcut may be able to use sensitive data with certain actions without prompting the user.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2024/Jul/16 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2024/Jul/17 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2024/Jul/18 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2024/Jul/19 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2024/Jul/20 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2024/Jul/21 | Mailing List Third Party Advisory |
| https://support.apple.com/en-us/HT214116 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT214117 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT214118 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT214119 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT214120 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT214124 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Aug 2024, 14:39
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | () http://seclists.org/fulldisclosure/2024/Jul/16 - Mailing List, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2024/Jul/17 - Mailing List, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2024/Jul/18 - Mailing List, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2024/Jul/19 - Mailing List, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2024/Jul/20 - Mailing List, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2024/Jul/21 - Mailing List, Third Party Advisory | |
| References | () https://support.apple.com/en-us/HT214116 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT214117 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT214118 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT214119 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT214120 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT214124 - Release Notes, Vendor Advisory | |
| First Time |
Apple ipados
Apple macos Apple iphone Os Apple watchos Apple |
|
| CPE | cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo |
30 Jul 2024, 13:32
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
30 Jul 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jul 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Jul 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-29 23:15
Updated : 2024-08-23 14:39
NVD link : CVE-2024-40835
Mitre link : CVE-2024-40835
CVE.ORG link : CVE-2024-40835
JSON object : View
Products Affected
apple
- ipados
- iphone_os
- watchos
- macos
CWE