CVE-2024-40787

Description

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, macOS Sonoma 14.6. A shortcut may be able to bypass Internet permission requirements.

Reserved 2024-07-10 | Published 2024-07-29 | Updated 2024-10-30 | Assigner apple

Problem types

A shortcut may be able to bypass Internet permission requirements

Product status

Any version before 17.6
affected

Any version before 13.6
affected

Any version before 10.6
affected

Any version before 14.6
affected

Any version before 12.7
affected

References

support.apple.com/en-us/HT214117

support.apple.com/en-us/HT214120

support.apple.com/en-us/HT214124

support.apple.com/en-us/HT214119

support.apple.com/en-us/HT214118

seclists.org/fulldisclosure/2024/Jul/16

seclists.org/fulldisclosure/2024/Jul/21

seclists.org/fulldisclosure/2024/Jul/20

seclists.org/fulldisclosure/2024/Jul/18

seclists.org/fulldisclosure/2024/Jul/19

cve.org (CVE-2024-40787)

nvd.nist.gov (CVE-2024-40787)

Download JSON