CVE-2024-40834
CVSS Score
4.4
EPSS Score
0.0%
EPSS Percentile
0th
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A shortcut may be able to bypass sensitive Shortcuts app settings.
| Vendor | apple |
| Product | macos |
| Ecosystems | |
| Industries | Technology |
| Published | Jul 29, 2024 |
| Last Updated | Apr 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for apple macos
Be the first to know when new medium vulnerabilities affecting apple macos are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apple / macOS
0 < 12.7.6 0 < 13.6.8 0 < 14.6
References
support.apple.com: https://support.apple.com/en-us/120910 support.apple.com: https://support.apple.com/en-us/120911 support.apple.com: https://support.apple.com/en-us/120912 support.apple.com: https://support.apple.com/en-us/HT214120 support.apple.com: https://support.apple.com/en-us/HT214119 support.apple.com: https://support.apple.com/en-us/HT214118 seclists.org: http://seclists.org/fulldisclosure/2024/Jul/20 seclists.org: http://seclists.org/fulldisclosure/2024/Jul/18 seclists.org: http://seclists.org/fulldisclosure/2024/Jul/19 support.apple.com: https://support.apple.com/kb/HT214120 support.apple.com: https://support.apple.com/kb/HT214119 support.apple.com: https://support.apple.com/kb/HT214118