CVE-2024-40797

medium

Description

This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. Visiting a malicious website may lead to user interface spoofing.

References

https://support.apple.com/en-us/121247

https://support.apple.com/en-us/121238

https://support.apple.com/en-us/121234

http://seclists.org/fulldisclosure/2024/Sep/41

http://seclists.org/fulldisclosure/2024/Sep/40

http://seclists.org/fulldisclosure/2024/Sep/33

Details

Source: Mitre, NVD

Published: 2024-09-17

Updated: 2025-11-04

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N