High severity7.1NVD Advisory· Published Jul 29, 2024· Updated Jun 17, 2026
CVE-2024-40787
CVE-2024-40787
Description
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <17.6
- (no CPE)range: before 17.6
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <10.6
- (no CPE)range: before 10.6
- Range: before 14.6
- Range: before 13.6.8
- Range: before 12.7.6
- Range: before 17.6
Patches
Vulnerability mechanics
References
20- seclists.org/fulldisclosure/2024/Jul/16nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2024/Jul/18nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2024/Jul/19nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2024/Jul/20nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2024/Jul/21nvdMailing ListThird Party Advisory
- support.apple.com/en-us/HT214117nvdVendor Advisory
- support.apple.com/en-us/HT214118nvdVendor Advisory
- support.apple.com/en-us/HT214119nvdVendor Advisory
- support.apple.com/en-us/HT214120nvdVendor Advisory
- support.apple.com/en-us/HT214124nvdVendor Advisory
- support.apple.com/en-us/120909nvd
- support.apple.com/en-us/120910nvd
- support.apple.com/en-us/120911nvd
- support.apple.com/en-us/120912nvd
- support.apple.com/en-us/120916nvd
- support.apple.com/kb/HT214117nvd
- support.apple.com/kb/HT214118nvd
- support.apple.com/kb/HT214119nvd
- support.apple.com/kb/HT214120nvd
- support.apple.com/kb/HT214124nvd
News mentions
0No linked articles in our index yet.