CVE-2024-40858

A permissions issue was addressed with additional restrictions

High · published April 2, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to access Contacts without user consent.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Published
2026-04-02T18:20Z
EPSS history
Timeline
  • 02 APR 18:20Z
    A permissions issue was addressed with additional restrictions
    cvelistv5