CVE-2024-40794: Input Validation

Q: What is the severity of CVE-2024-40794?

CVE-2024-40794 has a high severity due to the potential unauthorized access to private browsing tabs without authentication.

Q: How do I fix CVE-2024-40794?

To fix CVE-2024-40794, update to macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, or Safari 17.6.

Q: What products are affected by CVE-2024-40794?

CVE-2024-40794 affects Apple Safari versions up to 17.6, iOS versions up to 17.6, iPadOS versions up to 17.6, and macOS Sonoma versions up to 14.6.

Q: What is the nature of CVE-2024-40794?

CVE-2024-40794 is a vulnerability in WebKit that involves improper state management allowing access to private browsing tabs.

Q: Is authentication required to access private browsing tabs in CVE-2024-40794?

No, CVE-2024-40794 allows private browsing tabs to be accessed without authentication due to the vulnerability.

Published Jul 29, 2024

Updated

Accounts. The issue was addressed with improved checks.

Other sources

AirDrop. This issue was addressed through improved state management.

— Apple

apache. This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

— Apple

APFS. The issue was addressed with improved restriction of data container access.

— Apple

AppleMobileFileIntegrity. A downgrade issue was addressed with additional code-signing restrictions.

— Apple

AppleVA. The issue was addressed with improved memory handling.

— Apple

Credit

Linwz(DEVCORE), Mickey Jin@@patch1t, D4m0n, Amir Bazine(CrowdStrike Counter Adversary Operations), Karsten König(CrowdStrike Counter Adversary Operations), w0wbox, Csaba Fitzl@@theevilbit(Kandji), CVE-2023-6277, CVE-2023-52356, Yisumi, Junsung Lee(Trend Micro Zero Day Initiative), (CrowdStrike Counter Adversary Operations), Gandalf4a, CertiK SkyFall Team, Minghao Lin(Zhejiang University), Jiaxun Zhu(Zhejiang University), CVE-2024-40805, Jacob Braun, Mateen Alinaghi, Wojciech Regula(SecuRing), (Dawn Security Lab of JingDong), Zhongquan Li@@Guluisacat(Dawn Security Lab of JingDong), Mickey Jin@@patch1t(Kandji), an anonymous researcher, Kirin@@Pwnrin, Bistrit Dahal, Srijan Poudel, Jiahui Hu (梅零落)(NorthSea), Meng Zhang (鲸落)(NorthSea), Abhay Kailasia@@abhay_kailasia(Lakshmi Narain College of Technology Bhopal India), ajajfxhj, Huang Xilin(Ant Group Light), Maksymilian Motyl, Johan Carlsson (joaxcar), Seunghyun Lee@@0x10n(KAIST Hacking Lab working with Trend Micro Zero Day Initiative), Matthew Butler, Gary Kwong, Andreas Jaegersberger, Ro Achterberg, CVE-2024-4558, IES Red Team(ByteDance), Yeto, Michael DePlante@@izobashi(Trend Micro Zero Day Initiative), CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, Yann Gascuel(Alter Solutions), Wang Yu(Cyberserval), Ye Zhang@@VAR10CK(Baidu Security), sqrtpwn, Patrick Wardle(DoubleYou), Rodolphe BRUNETTI@@eisw0lf, Adam M., CVE-2024-6387, Pedro Tôrres@@t0rr3sp3dr0, (Kandji), Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Csaba Fitzl@@theevilbit(Offensive Security), Yadhu Krishna M(Cyber Security At Suma Soft Pvt), Narendra Bhati(Cyber Security At Suma Soft Pvt), Manager(Cyber Security At Suma Soft Pvt), Pune (India), Joshua Jones, Jiwon Park, Marcio Almeida(Tanto Security), Arsenii Kostromin (0x3c3e)

Affected Software

30 affected componentsFixes available

Apple macOS Sonoma<14.6

14.6

Apple iOS<17.6

17.6

Apple iPadOS<17.6

17.6

Apple Safari<17.6

17.6

Apple Safari<17.6

Apple iPadOS<17.6

Apple iPhone OS<17.6

Apple macOS<14.6