CVE-2024-40844

Опубликовано: 17 сент. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to observe data displayed to the user by Shortcuts.

Ссылки

https://support.apple.com/en-us/121234
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121238
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121246
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121247
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/39
http://seclists.org/fulldisclosure/2024/Sep/40
http://seclists.org/fulldisclosure/2024/Sep/41

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7 (исключая)

EPSS

Процентиль: 6%

0.00023

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-m548-7rvw-m5fc