Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-40835
PUBLISHED
More InfoOfficial Page
Assigner-apple
Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c
View Known Exploited Vulnerability (KEV) details
Published At-29 Jul, 2024 | 22:17
Updated At-02 Apr, 2026 | 18:20
Rejected At-
▼CVE Numbering Authority (CNA)

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to use sensitive data with certain actions without prompting the user.

Affected Products
Vendor
Apple Inc.Apple
Product
iOS and iPadOS
Versions
Affected
  • From 0 before 16.7.9 (custom)
  • From 0 before 17.6 (custom)
Vendor
Apple Inc.Apple
Product
macOS
Versions
Affected
  • From 0 before 12.7.6 (custom)
  • From 0 before 13.6.8 (custom)
  • From 0 before 14.6 (custom)
Vendor
Apple Inc.Apple
Product
watchOS
Versions
Affected
  • From 0 before 10.6 (custom)
Problem Types
TypeCWE IDDescription
N/AN/AA shortcut may be able to use sensitive data with certain actions without prompting the user
Type: N/A
CWE ID: N/A
Description: A shortcut may be able to use sensitive data with certain actions without prompting the user
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://support.apple.com/en-us/120908
N/A
https://support.apple.com/en-us/120909
N/A
https://support.apple.com/en-us/120910
N/A
https://support.apple.com/en-us/120911
N/A
https://support.apple.com/en-us/120912
N/A
https://support.apple.com/en-us/120916
N/A
Hyperlink: https://support.apple.com/en-us/120908
Resource: N/A
Hyperlink: https://support.apple.com/en-us/120909
Resource: N/A
Hyperlink: https://support.apple.com/en-us/120910
Resource: N/A
Hyperlink: https://support.apple.com/en-us/120911
Resource: N/A
Hyperlink: https://support.apple.com/en-us/120912
Resource: N/A
Hyperlink: https://support.apple.com/en-us/120916
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-noinfoCWE-noinfo Not enough information
Type: CWE
CWE ID: CWE-noinfo
Description: CWE-noinfo Not enough information
Metrics
VersionBase scoreBase severityVector
3.15.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Version: 3.1
Base score: 5.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://support.apple.com/en-us/HT214117
x_transferred
https://support.apple.com/en-us/HT214116
x_transferred
https://support.apple.com/en-us/HT214120
x_transferred
https://support.apple.com/en-us/HT214124
x_transferred
https://support.apple.com/en-us/HT214119
x_transferred
https://support.apple.com/en-us/HT214118
x_transferred
http://seclists.org/fulldisclosure/2024/Jul/16
x_transferred
http://seclists.org/fulldisclosure/2024/Jul/21
x_transferred
http://seclists.org/fulldisclosure/2024/Jul/20
x_transferred
http://seclists.org/fulldisclosure/2024/Jul/17
x_transferred
http://seclists.org/fulldisclosure/2024/Jul/18
x_transferred
http://seclists.org/fulldisclosure/2024/Jul/19
x_transferred
https://support.apple.com/kb/HT214124
N/A
https://support.apple.com/kb/HT214120
N/A
https://support.apple.com/kb/HT214119
N/A
https://support.apple.com/kb/HT214118
N/A
https://support.apple.com/kb/HT214117
N/A
https://support.apple.com/kb/HT214116
N/A
Hyperlink: https://support.apple.com/en-us/HT214117
Resource:
x_transferred
Hyperlink: https://support.apple.com/en-us/HT214116
Resource:
x_transferred
Hyperlink: https://support.apple.com/en-us/HT214120
Resource:
x_transferred
Hyperlink: https://support.apple.com/en-us/HT214124
Resource:
x_transferred
Hyperlink: https://support.apple.com/en-us/HT214119
Resource:
x_transferred
Hyperlink: https://support.apple.com/en-us/HT214118
Resource:
x_transferred
Hyperlink: http://seclists.org/fulldisclosure/2024/Jul/16
Resource:
x_transferred
Hyperlink: http://seclists.org/fulldisclosure/2024/Jul/21
Resource:
x_transferred
Hyperlink: http://seclists.org/fulldisclosure/2024/Jul/20
Resource:
x_transferred
Hyperlink: http://seclists.org/fulldisclosure/2024/Jul/17
Resource:
x_transferred
Hyperlink: http://seclists.org/fulldisclosure/2024/Jul/18
Resource:
x_transferred
Hyperlink: http://seclists.org/fulldisclosure/2024/Jul/19
Resource:
x_transferred
Hyperlink: https://support.apple.com/kb/HT214124
Resource: N/A
Hyperlink: https://support.apple.com/kb/HT214120
Resource: N/A
Hyperlink: https://support.apple.com/kb/HT214119
Resource: N/A
Hyperlink: https://support.apple.com/kb/HT214118
Resource: N/A
Hyperlink: https://support.apple.com/kb/HT214117
Resource: N/A
Hyperlink: https://support.apple.com/kb/HT214116
Resource: N/A
Details not found