Vulnerability · NVD
CVE-2024-40836
MEDIUM 5.5
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, watchOS 10.6. A shortcut may be able to use sensitive data with certain actions without prompting the user.
Attack vector : Local
No user interaction
Show raw CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.56%
exploit very unlikely
percentile 43.3%
OS versions that fix this CVE
This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.