CVE-2024-40834
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.4epss 0.3%
probabilidad de explotación
0.3%top 85% de las CVE
explotación observada
noninguna fuente lo reporta
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A shortcut may be able to bypass sensitive Shortcuts app settings.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Productos afectados
Apple · macOSReferencias
http://seclists.org/fulldisclosure/2024/Jul/18http://seclists.org/fulldisclosure/2024/Jul/19http://seclists.org/fulldisclosure/2024/Jul/20https://support.apple.com/en-us/120910https://support.apple.com/en-us/120911https://support.apple.com/en-us/120912https://support.apple.com/en-us/HT214118https://support.apple.com/en-us/HT214119https://support.apple.com/en-us/HT214120https://support.apple.com/kb/HT214118https://support.apple.com/kb/HT214119https://support.apple.com/kb/HT214120