CVE-2024-40797 is a medium severity vulnerability in macOS that allows user interface spoofing via visiting a malicious website. The issue was addressed through improved state management and is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15.