CVE-2024-40778

2024-07-2923:15:11

[email protected]

web.nvd.nist.gov

authentication

macos

ios

ipados

photos

hidden photos album

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

16.6%

JSON

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9. Photos in the Hidden Photos Album may be viewed without authentication.

Affected configurations

Nvd

Node

appleiphone_osRange<16.7.9

appleiphone_osRange17.0–17.6

Node

appleipadosRange<16.7.9

appleipadosRange17.0–17.6

Node

applemacosRange<14.6

VendorProductVersionCPE
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
appleipados*cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::
apple	ipados	*	cpe:2.3:o:apple:ipados::::::::
apple	macos	*	cpe:2.3:o:apple:macos::::::::