VulnerabilityModified

CVE-2024-40862

An attacker may be able to determine the Apple ID of the owner of the computer.

MEDIUM 5.3EPSS 0.48%

Does this matter?

Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own.

Description

A privacy issue was addressed by removing sensitive data. This issue is fixed in Xcode 16. An attacker may be able to determine the Apple ID of the owner of the computer.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.48% probability · 40th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: apple/xcode
Source: product-security@apple.com

References

https://support.apple.com/en-us/121239Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/38

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.