CVE-2024-40796

MEDIUM

macOS Sonoma <14.6, iOS/iPadOS <16.7.9, macOS Monterey <12.7.6, mac...

Title source: llm

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Private browsing may leak some browsing history.

References (16)

https://support.apple.com/en-us/120908

https://support.apple.com/en-us/120910

https://support.apple.com/en-us/120911

https://support.apple.com/en-us/120912

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2024/Jul/17

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2024/Jul/18

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2024/Jul/19

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2024/Jul/20

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT214116

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT214118

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT214119

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT214120

[Vendor Advisory] https://support.apple.com/kb/HT214116

[Vendor Advisory] https://support.apple.com/kb/HT214118

[Vendor Advisory] https://support.apple.com/kb/HT214119

[Vendor Advisory] https://support.apple.com/kb/HT214120

Scores

CVSS v3 5.3

EPSS 0.0025

EPSS Percentile 48.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-359

Status published

Products (7)

Apple/iOS and iPadOS < 16.7.9

apple/ipados < 16.7.9

apple/iphone_os < 16.7.9

apple/macos < 12.7.6

Apple/macOS < 12.7.6

Apple/macOS < 13.6.8

Apple/macOS < 14.6

Published Jul 29, 2024

Tracked Since Feb 18, 2026