CVE-2024-40858: Apple macOS

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. An app may be able to access Contacts without user consent.

Affected products

• Apple macOS: before 15.1 (fixed in 15.1)

Published 2026-04-02. Last modified 2026-07-24.