CVE-2024-40849EXPLOITEDPATCHED

apple · macos

CVE-2024-40849: A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.1. An app may be able

Description

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to break out of its sandbox.

Affected Products

Vendor	Product	Versions
apple	macos	0, 15.0

References

https://support.apple.com/en-us/121564

Related News (1 articles)

Tier C

VulDB12h ago

CVE-2024-40849 | Apple macOS up to 15.0 App race condition

→ No new info (linked only)

CVSS 3.17.5 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA KEV❌ No

Actively exploited✅ Yes

Patch available

15.1

PublishedApr 2, 2026

Last enriched12h agov2

Trending Score53

Source articles1

Independent1

Info Completeness8/14

Missing: epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-20700EXPKEV

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memo

Trending: 88

CRITICALCVE-2024-44219EXP

CVE-2024-44219: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious a

Trending: 56

NONECVE-2025-43202EXP

CVE-2025-43202: This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 1

Trending: 54

HIGHCVE-2024-44286EXP

CVE-2024-44286: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with

Trending: 53

HIGHCVE-2025-43210EXP

CVE-2025-43210: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18

Trending: 47

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Apr 2, 2026

Discovered by ZDM

Apr 2, 2026

Actively Exploited

Apr 2, 2026

Patch Available

Apr 2, 2026

Updated: affectedVersions, activelyExploited

Apr 2, 2026

Version History

Last enriched 12h ago

v2Tier C12h ago

Added affected version 15.0 and updated exploit availability to false while marking it as actively exploited.

affectedVersionsactivelyExploited

via VulDB

v115h ago

Initial creation