medium6.5
CVE-2024-23271
A logic issue was addressed with improved checks.
Impact
A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | before 17.3 |
| Apple | Ipados | before 17.3 |
| Apple | Iphone Os | before 17.3 |
| Apple | Macos | from 14.0 before 14.3 |
| Apple | Tvos | before 17.3 |
| Apple | Watchos | before 10.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/120304
- https://support.apple.com/en-us/120306
- https://support.apple.com/en-us/120309
- https://support.apple.com/en-us/120311
- https://support.apple.com/en-us/120339
- https://support.apple.com/en-us/HT214055
- https://support.apple.com/en-us/HT214056
- https://support.apple.com/en-us/HT214059
- https://support.apple.com/en-us/HT214060
- https://support.apple.com/en-us/HT214061
- https://support.apple.com/kb/HT214055
- https://support.apple.com/kb/HT214056
- https://support.apple.com/kb/HT214059
- https://support.apple.com/kb/HT214060
- https://support.apple.com/kb/HT214061