PT-2024-29095

CVE-2024-40838

Published

2024-09-16

Updated

2024-09-25

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15

Description A privacy issue was addressed by moving sensitive data to a protected location. A malicious app may be able to access notifications from the user's device.

Recommendations For versions prior to 15, update to macOS Sequoia 15 to resolve the issue. As a temporary workaround, consider restricting access to sensitive notifications until the update is applied.

Exploitability

Fix

Impacts

Researchers

Brian Mcnulty

Cristian Dinca

Vaibhav Prajapati

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers