exploitDog

CVE-2024-40797

Опубликовано: 17 сент. 2024

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. Visiting a malicious website may lead to user interface spoofing.

Ссылки

https://support.apple.com/en-us/121234
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121238
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121247
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/40
http://seclists.org/fulldisclosure/2024/Sep/41

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7 (исключая)

EPSS

Процентиль: 33%

0.00126

Низкий

6.1 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-cw5r-673r-7ww3

CVSS3: 6.1

github

больше 1 года назад

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. Visiting a malicious website may lead to user interface spoofing.

EPSS

Процентиль: 33%

0.00126

Низкий

6.1 Medium

CVSS3

Дефекты

NVD-CWE-noinfo