CVE-2024-40858EPSS p5.9%

CVE-2024-40858CVE-2024-40858

apple / macos

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to access Contacts without user consent.

Scoring

CVSS 7.1 ()
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS0.17% probability of exploitation · percentile 5.9% · 2026-10-05T12:00:23Z
Last modified2026-07-24
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.