CVE Vulnerabilities

CVE-2024-40809

Published: Jul 29, 2024 | Modified: Nov 04, 2025
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, visionOS 1.3, macOS Sonoma 14.6. A shortcut may be able to bypass Internet permission requirements.

Affected Software

NameVendorStart VersionEnd Version
IpadosApple*16.7.9 (excluding)
IpadosApple17.0 (including)17.6 (excluding)
Iphone_osApple*16.7.9 (excluding)
Iphone_osApple17.0 (including)17.6 (excluding)
MacosApple*12.7.6 (excluding)
MacosApple13.0 (including)13.6.8 (excluding)
MacosApple14.0 (including)14.6 (excluding)
VisionosApple*1.3 (excluding)
WatchosApple*10.6 (excluding)

References