OS X update for AppleMobileFileIntegrity (CVE-2024-40847)

OS X update for AppleMobileFileIntegrity (CVE-2024-40847)

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:C/I:N/A:N)

Published

09/17/2024

Created

11/01/2024

Added

10/31/2024

Modified

01/28/2025

Description

The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access sensitive user data.

Solution(s)

• apple-osx-upgrade-13_7
• apple-osx-upgrade-14_7
• apple-osx-upgrade-15

References

• https://attackerkb.com/topics/cve-2024-40847
• CVE - 2024-40847
• https://support.apple.com/en-us/121234
• https://support.apple.com/en-us/121238
• https://support.apple.com/en-us/121247