Detections
Analytics
CVE-2024-40836
medium
Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, watchOS 10.6. A shortcut may be able to use sensitive data with certain actions without prompting the user.
References
https://support.apple.com/kb/HT214124
https://support.apple.com/kb/HT214119
https://support.apple.com/kb/HT214117
https://support.apple.com/kb/HT214116
https://support.apple.com/en-us/HT214124
https://support.apple.com/en-us/HT214119
https://support.apple.com/en-us/HT214117
https://support.apple.com/en-us/HT214116
https://support.apple.com/en-us/120916
https://support.apple.com/en-us/120911
https://support.apple.com/en-us/120909
https://support.apple.com/en-us/120908
http://seclists.org/fulldisclosure/2024/Jul/21
http://seclists.org/fulldisclosure/2024/Jul/18