CVE-2024-40848

A downgrade issue was addressed with additional code-signing restrictions

High · published September 16, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An attacker may be able to read sensitive information.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00709 · 53.0th percentile
Published
2024-09-16T23:23Z
EPSS history
Timeline
  • 16 SEP 23:23Z
    A downgrade issue was addressed with additional code-signing restrictions
    cvelistv5