{"id":"CVE-2024-40863","published":"2024-09-16T23:23:04Z","modified":"2026-04-02T18:19:48Z","title":"This issue was addressed with improved data protection","vendor":"Apple","product":"iOS and iPadOS","tier":"tail","description":{"text":"This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to leak sensitive user information.","provenance":"source","from":"CVE.org"},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.0022,"percentile":0.12576,"provenance":"source"},"cwes":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor"}],"references":[{"url":"https://support.apple.com/en-us/121250","tags":[]},{"url":"http://seclists.org/fulldisclosure/2024/Sep/32","tags":[]}],"priority":{"score":6.4,"factors":[{"name":"EPSS percentile","points":2.52},{"name":"CVSS severity","points":3.85}]},"vendorSlug":"apple","affectedVersions":[{"vendor":"Apple","product":"iOS and iPadOS","versions":["< 18"]}],"euvd":{"id":"EUVD-2024-38697","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-200"}}