CVE-2024-40834

Description

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A shortcut may be able to bypass sensitive Shortcuts app settings.

Reserved 2024-07-10 | Published 2024-07-29 | Updated 2024-10-30 | Assigner apple

Problem types

A shortcut may be able to bypass sensitive Shortcuts app settings

Product status

Any version before 13.6
affected

Any version before 14.6
affected

Any version before 12.7
affected

References

support.apple.com/en-us/HT214120

support.apple.com/en-us/HT214119

support.apple.com/en-us/HT214118

seclists.org/fulldisclosure/2024/Jul/20

seclists.org/fulldisclosure/2024/Jul/18

seclists.org/fulldisclosure/2024/Jul/19

cve.org (CVE-2024-40834)

nvd.nist.gov (CVE-2024-40834)

Download JSON