CVE-2024-40817

Summary

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Visiting a website that frames malicious content may lead to UI spoofing.

Affected Software

Weaknesses

• Visiting a website that frames malicious content may lead to UI spoofing

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT214121
• https://support.apple.com/en-us/HT214120
• https://support.apple.com/en-us/HT214119
• https://support.apple.com/en-us/HT214118
• https://support.apple.com/kb/HT214121
• http://seclists.org/fulldisclosure/2024/Jul/15
• http://seclists.org/fulldisclosure/2024/Jul/20
• http://seclists.org/fulldisclosure/2024/Jul/18
• http://seclists.org/fulldisclosure/2024/Jul/19
• https://support.apple.com/kb/HT214120
• https://support.apple.com/kb/HT214119
• https://support.apple.com/kb/HT214118

References

• https://support.apple.com/en-us/120910
• https://support.apple.com/en-us/120911
• https://support.apple.com/en-us/120912
• https://support.apple.com/en-us/120913

• ←Previous
• Next→