Fiche vulnérabilité
CVE-2024-40787 : faille élevée apple ipados (CVSS 7.1)
Description
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements.
En bref
- Sévérité
- Élevée (CVSS 7.1)
- Vecteur CVSS
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Exploitation active
- Non signalée par la CISA
- Publication
- 29 juil. 2024
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- apple ipados
- apple iphone os
- apple macos
- apple watchos
Références
- Fiche CVE-2024-40787 sur le NVD (NIST)
- support.apple.com/en-us/120909
- support.apple.com/en-us/120910
- support.apple.com/en-us/120911
- support.apple.com/en-us/120912
- support.apple.com/en-us/120916
- seclists.org/fulldisclosure/2024/Jul/16
- seclists.org/fulldisclosure/2024/Jul/18
- seclists.org/fulldisclosure/2024/Jul/19
- seclists.org/fulldisclosure/2024/Jul/20
- seclists.org/fulldisclosure/2024/Jul/21
- support.apple.com/en-us/HT214117
- support.apple.com/en-us/HT214118
- support.apple.com/en-us/HT214119
- support.apple.com/en-us/HT214120
- support.apple.com/en-us/HT214124