CVE-2024-40850: Input Validation
First published: Mon Sep 16 2024(Updated: )
A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to access user-sensitive data.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPadOS | <17.7 | |
| Apple iPhone OS | <17.7 | |
| Apple macOS | <13.7 | |
| Apple macOS | >=14.0<14.7 | |
| Apple tvOS | <18.0 | |
| Apple visionOS | <2.0 | |
| Apple watchOS | <11.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/121234
- https://support.apple.com/en-us/121238
- https://support.apple.com/en-us/121240
- https://support.apple.com/en-us/121246
- https://support.apple.com/en-us/121247
- https://support.apple.com/en-us/121248
- https://support.apple.com/en-us/121249
- https://support.apple.com/en-us/121250
Frequently Asked Questions
What is the severity of CVE-2024-40850?
CVE-2024-40850 has a high severity level due to its potential to expose user-sensitive data.
How do I fix CVE-2024-40850?
To fix CVE-2024-40850, update your device to the latest version of the affected operating systems listed in the advisory.
What devices are affected by CVE-2024-40850?
CVE-2024-40850 affects multiple Apple operating systems including iPadOS 17.7, iPhone OS 17.7, macOS versions prior to 14.7, and earlier versions of tvOS, visionOS, and watchOS.
When was CVE-2024-40850 reported?
CVE-2024-40850 was reported and fixed with improved input validation in various Apple operating system updates.
What types of data could be accessed due to CVE-2024-40850?
Due to CVE-2024-40850, an app may be able to access sensitive user data, potentially compromising user privacy.
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/source
- vendor/apple
- canonical/apple ipados
- canonical/apple iphone os
- canonical/apple macos
- version/apple macos/14.0
- canonical/apple tvos
- canonical/apple visionos
- canonical/apple watchos