PT-2024-29099
CVE-2024-40842
·
Published
2024-09-16
·
Updated
2024-09-24
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
macOS versions prior to Sequoia 15
Description
An issue was addressed with improved validation of environment variables, which may allow an app to access user-sensitive data. The issue is fixed in macOS Sequoia 15.
Recommendations
For versions prior to macOS Sequoia 15, update to macOS Sequoia 15 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update can be applied.
Found an issue in the description? Have something to add? Feel free to write us 👾