CVE-2024-44206

Summary

An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.

Affected Software

VendorProductVersion RangeStatus
AppleSafari0 < 17.6affected
AppleiOS and iPadOS0 < 17.6affected
ApplemacOS0 < 14.6affected
AppletvOS0 < 17.6affected
ApplevisionOS0 < 1.3affected
ApplewatchOS0 < 10.6affected

Weaknesses

  • A user may be able to bypass some web content restrictions

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References