PT-2024-41823 · Apple · Apple Macos

CVE-2024-40858 · Published 2024-10-28 · Updated 2026-04-03

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1

Description A permissions issue allowed an application to access Contacts without user consent. This was addressed with additional restrictions.

Recommendations Update to macOS version 15.1 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-40858

Affected Products

Apple Macos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-40858 · Security Note
• https://support.apple.com/en-us/121564 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40858 · Note
• https://twitter.com/CVEnew/status/2040128799216435285 · Twitter Post