{"id":"CVE-2024-40821","state":"PUBLISHED","title":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extension","description":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions.","publishedAt":"2024-07-29T22:16:50.306Z","updatedAt":"2026-04-02T18:15:31.108Z","severity":{"score":8.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"12.7.6","versionType":"custom"},{"version":"0","status":"affected","lessThan":"13.6.8","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.6","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/120910","https://support.apple.com/en-us/120911","https://support.apple.com/en-us/120912","https://support.apple.com/en-us/HT214120","https://support.apple.com/en-us/HT214119","https://support.apple.com/en-us/HT214118","http://seclists.org/fulldisclosure/2024/Jul/20","http://seclists.org/fulldisclosure/2024/Jul/18","http://seclists.org/fulldisclosure/2024/Jul/19","https://support.apple.com/kb/HT214120","https://support.apple.com/kb/HT214119","https://support.apple.com/kb/HT214118"],"weaknesses":["CWE-281"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/40xxx/CVE-2024-40821.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-40821","state":"PUBLISHED","datePublished":"2024-07-29T22:16:50.306Z","dateUpdated":"2026-04-02T18:15:31.108Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2024-07-10T17:11:04.698Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"12.7.6","versionType":"custom"},{"version":"0","status":"affected","lessThan":"13.6.8","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.6","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/120910"},{"url":"https://support.apple.com/en-us/120911"},{"url":"https://support.apple.com/en-us/120912"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Third party app extensions may not receive the correct sandbox restrictions"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:15:31.108Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"apple","product":"macos","defaultStatus":"unknown","versions":[{"version":"12.0","status":"affected","lessThan":"12.7","versionType":"custom"},{"version":"13.0","status":"affected","lessThan":"13.6","versionType":"custom"},{"version":"14.0","status":"affected","lessThan":"14.6","versionType":"custom"}],"cpes":["cpe:2.3:o:apple:macos:12.0:*:*:*:*:*:*:*","cpe:2.3:o:apple:macos:13.0:*:*:*:*:*:*:*","cpe:2.3:o:apple:macos:14.0:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.4,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-07-29T23:56:49.335953Z","id":"CVE-2024-40821","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-281","type":"CWE","lang":"en","description":"CWE-281 Improper Preservation of Permissions"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-30T14:18:24.998Z"}},{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT214120","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT214119","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT214118","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/20","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/18","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Jul/19","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT214120"},{"url":"https://support.apple.com/kb/HT214119"},{"url":"https://support.apple.com/kb/HT214118"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-04T17:26:00.445Z"}}]}}}