CVE-2024-40849: Apple macOS

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to break out of its sandbox.

Affected products

• Apple macOS: before 15.1 (fixed in 15.1)

Published 2026-04-02. Last modified 2026-07-24.