CVE-2024-40848

Description

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An attacker may be able to read sensitive information.

Reserved 2024-07-10 | Published 2024-09-16 | Updated 2024-09-17 | Assigner apple

Problem types

An attacker may be able to read sensitive information

Product status

Any version before 13.7
affected

Any version before 15
affected

Any version before 14.7
affected

References

support.apple.com/en-us/121234

support.apple.com/en-us/121238

support.apple.com/en-us/121247

cve.org (CVE-2024-40848)

nvd.nist.gov (CVE-2024-40848)

Download JSON