7.5
High
CVE-2024-40836 A logic issue was addressed with improved checks
Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, watchOS 10.6. A shortcut may be able to use sensitive data with certain actions without prompting the user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iOS and iPadOS 17.6 | earliest → < 17.6 | 17.6 |
| iOS and iPadOS 16.7 | earliest → < 16.7.9 | 16.7.9 |
| watchOS 10.6 | earliest → < 10.6 | 10.6 |
| macOS 14.6 | earliest → < 14.6 | 14.6 |
| ipad_os 17.0 | 17.0 → < 17.6 | 17.6 |
| iphone_os 17.0 | 17.0 → < 17.6 | 17.6 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of iOS and iPadOS
The 2049 CVEs of iOS and iPadOS →
CVE-2026-86925
An authorization issue was addressed with improved state management
5.5
Medium
CVE-2026-84627
A buffer overflow was addressed with improved bounds checking
7.8
High
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-113912
An out-of-bounds access issue was addressed with improved bounds checking
7.1
High