CVE-2024-40864

low

Description

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.2, watchOS 11.2. An attacker in a privileged network position may be able to track a user's activity.

References

https://support.apple.com/en-us/122375

https://support.apple.com/en-us/122374

https://support.apple.com/en-us/121844

https://support.apple.com/en-us/121843

https://support.apple.com/en-us/121839

https://support.apple.com/en-us/121837

http://seclists.org/fulldisclosure/2025/Apr/9

http://seclists.org/fulldisclosure/2025/Apr/10

Details

Source: Mitre, NVD

Published: 2025-03-31

Updated: 2026-04-02

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 2.7

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Severity: Low

EPSS

EPSS: 0.00025