Skip to content
Sign in
5.9 Medium

CVE-2024-40774 A downgrade issue was addressed with additional code-signing restrictions

Description

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences.

Affected products and versions

Product Affected versions Fixed in
iOS and iPadOS 17.6 earliest → < 17.6 17.6
macOS 14.6 earliest → < 14.6 14.6
macOS 13.6 earliest → < 13.6.8 13.6.8
macOS 12.7 earliest → < 12.7.6 12.7.6
watchOS 10.6 earliest → < 10.6 10.6
tvOS 17.6 earliest → < 17.6 17.6

Other CVEs of iOS and iPadOS

The 2049 CVEs of iOS and iPadOS →
CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High
Track this CVE