Search for vulnerabilities
Vulnerability details: VCID-rgcb-g9m4-aaak
Vulnerability ID VCID-rgcb-g9m4-aaak
Aliases CVE-2024-40794
Summary This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, Safari 17.6. Private Browsing tabs may be accessed without authentication.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40794.json
cvssv3 7.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40794.json
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00058 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00083 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00372 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00372 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00372 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00372 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00372 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00372 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00372 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00374 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00374 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00374 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00395 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00395 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00395 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00395 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00395 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00395 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00395 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00404 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00416 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00419 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.00449 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
epss 0.01202 https://api.first.org/data/v1/epss?cve=CVE-2024-40794
cvssv3.1 5.3 http://seclists.org/fulldisclosure/2024/Jul/15
cvssv3.1 5.3 http://seclists.org/fulldisclosure/2024/Jul/15
ssvc Track http://seclists.org/fulldisclosure/2024/Jul/15
cvssv3.1 5.3 http://seclists.org/fulldisclosure/2024/Jul/16
cvssv3.1 5.3 http://seclists.org/fulldisclosure/2024/Jul/16
ssvc Track http://seclists.org/fulldisclosure/2024/Jul/16
ssvc Track http://seclists.org/fulldisclosure/2024/Jul/16
cvssv3.1 5.3 http://seclists.org/fulldisclosure/2024/Jul/18
ssvc Track http://seclists.org/fulldisclosure/2024/Jul/18
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 5.3 https://nvd.nist.gov/vuln/detail/CVE-2024-40794
cvssv3.1 5.3 https://nvd.nist.gov/vuln/detail/CVE-2024-40794
cvssv3.1 5.3 https://support.apple.com/en-us/HT214117
cvssv3.1 5.3 https://support.apple.com/en-us/HT214117
ssvc Track https://support.apple.com/en-us/HT214117
ssvc Track https://support.apple.com/en-us/HT214117
cvssv3.1 5.3 https://support.apple.com/en-us/HT214119
cvssv3.1 5.3 https://support.apple.com/en-us/HT214119
ssvc Track https://support.apple.com/en-us/HT214119
ssvc Track https://support.apple.com/en-us/HT214119
cvssv3.1 5.3 https://support.apple.com/en-us/HT214121
cvssv3.1 5.3 https://support.apple.com/en-us/HT214121
ssvc Track https://support.apple.com/en-us/HT214121
ssvc Track https://support.apple.com/en-us/HT214121
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40794.json
https://api.first.org/data/v1/epss?cve=CVE-2024-40794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40794
http://seclists.org/fulldisclosure/2024/Jul/15
http://seclists.org/fulldisclosure/2024/Jul/16
http://seclists.org/fulldisclosure/2024/Jul/18
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://support.apple.com/en-us/HT214117
https://support.apple.com/en-us/HT214119
https://support.apple.com/en-us/HT214121
2302066 https://bugzilla.redhat.com/show_bug.cgi?id=2302066
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
CVE-2024-40794 https://nvd.nist.gov/vuln/detail/CVE-2024-40794
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40794.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40794.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://seclists.org/fulldisclosure/2024/Jul/15
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://seclists.org/fulldisclosure/2024/Jul/15
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at http://seclists.org/fulldisclosure/2024/Jul/15
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://seclists.org/fulldisclosure/2024/Jul/16
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://seclists.org/fulldisclosure/2024/Jul/16
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at http://seclists.org/fulldisclosure/2024/Jul/16
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at http://seclists.org/fulldisclosure/2024/Jul/16
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://seclists.org/fulldisclosure/2024/Jul/18
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at http://seclists.org/fulldisclosure/2024/Jul/18
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-40794
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-40794
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://support.apple.com/en-us/HT214117
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://support.apple.com/en-us/HT214117
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at https://support.apple.com/en-us/HT214117
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at https://support.apple.com/en-us/HT214117
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://support.apple.com/en-us/HT214119
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://support.apple.com/en-us/HT214119
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at https://support.apple.com/en-us/HT214119
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at https://support.apple.com/en-us/HT214119
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://support.apple.com/en-us/HT214121
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://support.apple.com/en-us/HT214121
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at https://support.apple.com/en-us/HT214121
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-30T18:46:28Z/ Found at https://support.apple.com/en-us/HT214121
Exploit Prediction Scoring System (EPSS)
Percentile 0.25872
EPSS Score 0.00058
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
2024-07-30T10:05:49.572312+00:00 NVD Importer Import https://nvd.nist.gov/vuln/detail/CVE-2024-40794 34.0.0rc4