CVE-2024-40840
This issue was addressed through improved state management
Medium · published September 16, 2024
What it is
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Siri to access sensitive user data.
The record
Technical detail
- CVSS v3.1
- 4.6 · MEDIUM
- Vector
- CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00270 · 18.2th percentile
- Published
- 2024-09-16T23:22Z
EPSS history
Timeline