CVE-2024-23263

Summary

A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

Affected Software

VendorProductVersion RangeStatus
AppleSafari0 < 17.4affected
AppleiOS and iPadOS0 < 16.7.6affected
AppleiOS and iPadOS0 < 17.4affected
ApplemacOS0 < 14.4affected
AppletvOS0 < 17.4affected
ApplevisionOS0 < 1.1affected
ApplewatchOS0 < 10.4affected

Weaknesses

  • Processing maliciously crafted web content may prevent Content Security Policy from being enforced

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References