First published: Mon Sep 16 2024(Updated: )
Accessibility. This issue was addressed through improved state management.
Credit: product-security@apple.com Chloe Surett Jake Derouin Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaHolger Fuhrmannek Tuan D. Hoang Snoolie Keffaber @0xilis an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day InitiativeAntonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 ajajfxhj Bistrit Dahal Joshua Keller Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Domien Schepers
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS, iPadOS, and watchOS | <18 | 18 |
Apple iOS, iPadOS, and watchOS | <18 | 18 |
Apple iOS, iPadOS, and watchOS | <18.0 | |
iStyle @cosme iPhone OS | <18.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2024-40830 has been classified with a severity level that indicates significant potential risk due to user data exposure.
To mitigate CVE-2024-40830, users should upgrade to iOS 18 or iPadOS 18 to ensure the vulnerability is addressed.
CVE-2024-40830 affects Apple iPadOS and iPhone OS versions prior to 18.0.
If exploited, CVE-2024-40830 may allow an app to enumerate a user's installed applications, potentially compromising user privacy.
There are no known workarounds for CVE-2024-40830; upgrading the software is the recommended action.