Cyber Resilience

CVE-2024-40801

Apple Macos ≤ 14.7

Published
17 September 2024
Modified
02 April 2026
Patch / advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0023 14th percentile
Risk Priority 42 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2024-40801 is a medium-severity an unspecified weakness vulnerability in Apple Macos. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 14th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected user data.

CWE(s)

Related Threats

CVEs Like This One

CVE-2026-20601Same product: Apple Macos
CVE-2024-44156Same product: Apple Macos
CVE-2023-41975Same product: Apple Macos
CVE-2025-43239Same product: Apple Macos
CVE-2025-43414Same product: Apple Macos
CVE-2024-40859Same product: Apple Macos
CVE-2023-23493Same product: Apple Macos
CVE-2024-54515Same product: Apple Macos
CVE-2025-43479Same product: Apple Macos
CVE-2026-28828Same product: Apple Macos

Affected Assets

apple
macos
≤ 14.7

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References