Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.6
CVE-2024-40829: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, watchOS 10.6. An attacker may be able to view rest...
CVE-2024-40829 · published 2 years ago
Summary
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, watchOS 10.6. An attacker may be able to view restricted content from the lock screen.
What to do
- Update apple macos to version 13.6.8 or later.
- Update apple watchos to version 10.6 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 16.7.9 >= 17.0, < 17.6 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 16.7.9 >= 17.0, < 17.6 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
>= 13.0, < 13.6.8 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 10.6 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, watchOS 10.6. An attacker may be able to view rest...
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, watchOS 10.6. An attacker may be able to view restricted content from the lock screen.
References
- https://support.apple.com/en-us/120908
- https://support.apple.com/en-us/120909
- https://support.apple.com/en-us/120912
- https://support.apple.com/en-us/120916
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List
- http://seclists.org/fulldisclosure/2024/Jul/17 Mailing List
- http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List
- http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List
- https://support.apple.com/en-us/HT214116 Vendor Advisory
- https://support.apple.com/en-us/HT214117 Vendor Advisory
- https://support.apple.com/en-us/HT214120 Vendor Advisory
- https://support.apple.com/en-us/HT214124 Vendor Advisory
- https://support.apple.com/kb/HT214116
- https://support.apple.com/kb/HT214117
- https://support.apple.com/kb/HT214120
- https://support.apple.com/kb/HT214124
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-416Use After Free
Timeline
Published29 Jul 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-40829 · NVD
Track software like this
Free during beta