CVE-2024-40781

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A local attacker may be able to elevate their privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
ApplemacOS< 12.7.6; < 13.6.8; < 14.6
applemacos>= 12.0, < 12.7.6; >= 13.0, < 13.6.8; >= 14.0, < 14.6

References

Timeline

Published
Jul 29, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-407826.5A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS CVE-2024-407835.5The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6,CVE-2024-407845.5An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 1CVE-2024-407856.1This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, mCVE-2024-407867.5This issue was addressed through improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, mCVE-2024-407877.1This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12CVE-2024-407885.5A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOSCVE-2024-407896.5An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9,CVE-2024-40797.8An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution. Successful eCVE-2024-407905.5The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from CVE-2024-407913.3A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 CVE-2024-407923.3A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to chan
CVE-2024-40781: High severity, CVSS 7.8 | Vulnix