CVE-2024-23271

Summary

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

Affected Software

Weaknesses

• A malicious website may cause unexpected cross-origin behavior

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT214059
• https://support.apple.com/en-us/HT214055
• https://support.apple.com/en-us/HT214056
• https://support.apple.com/en-us/HT214060
• https://support.apple.com/en-us/HT214061
• https://support.apple.com/kb/HT214060
• https://support.apple.com/kb/HT214059
• https://support.apple.com/kb/HT214061
• https://support.apple.com/kb/HT214055
• https://support.apple.com/kb/HT214056

References

• https://support.apple.com/en-us/120304
• https://support.apple.com/en-us/120306
• https://support.apple.com/en-us/120309
• https://support.apple.com/en-us/120311
• https://support.apple.com/en-us/120339

• ←Previous
• Next→