CVE-2024-40791 is a privacy vulnerability involving insufficient redaction of private data in log entries on Apple operating systems. This flaw could allow an app with limited privileges to access information about a user's contacts. The issue has been addressed by Apple in macOS Ventura 13.7, iOS 17.7, iPadOS 17.7, iOS 18, iPadOS 18, macOS Sonoma 14.7, and macOS Sequoia 15. The vulnerability has a low severity rating with a CVSS score of 3.3.