CVEvulnerability
CVE-2024-23206
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-200
Description
An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user.
Affected configurations
• apple safari (< 17.3)
• apple ipados (> 16.0 < 16.7.5)
• apple ipados (> 17.0 < 17.3)
• apple iphone os (> 16.0 < 16.7.5)
• apple iphone os (> 17.0 < 17.3)
• apple macos (< 14.3)
• apple tvos (< 17.3)
• apple watchos (< 10.3)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/120304 support.apple.com
- https://support.apple.com/en-us/120306 support.apple.com
- https://support.apple.com/en-us/120309 support.apple.com
- https://support.apple.com/en-us/120310 support.apple.com
- https://support.apple.com/en-us/120311 support.apple.com
- https://support.apple.com/en-us/120339 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jan/27 Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/33 Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/34 Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/36 Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/39 Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/40 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2024/02/05/8 www.openwall.com
- https://lists.fedoraproject.org/archives/list/[email protected]/message/US43EQFC2IS66EA2CPAZFH2RQ6WD7PKF/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/[email protected]/message/X2VJMEDT4GL42AQVHSYOT6DIVJDZWIV4/ lists.fedoraproject.org
- https://support.apple.com/en-us/HT214055 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214056 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214059 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214060 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214061 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214063 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214055 support.apple.com
- https://support.apple.com/kb/HT214056 support.apple.com
- https://support.apple.com/kb/HT214059 support.apple.com
- https://support.apple.com/kb/HT214060 support.apple.com
- https://support.apple.com/kb/HT214061 support.apple.com
- https://support.apple.com/kb/HT214063 support.apple.com