CVEvulnerability
CVE-2024-40785
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to a cross site scripting attack.
Affected configurations
• apple iphone os (< 16.7.9)
• apple iphone os (>= 17.0 < 17.6)
• apple ipados (< 16.7.9)
• apple ipados (>= 17.0 < 17.6)
• apple safari (< 17.6)
• apple watchos (< 10.6)
• apple tvos (< 17.6)
• apple visionos (< 1.3)
• apple macos (< 14.6)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://support.apple.com/en-us/120908 support.apple.com
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120911 support.apple.com
- https://support.apple.com/en-us/120913 support.apple.com
- https://support.apple.com/en-us/120914 support.apple.com
- https://support.apple.com/en-us/120915 support.apple.com
- https://support.apple.com/en-us/120916 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/15 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/17 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/22 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/23 Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00006.html lists.debian.org
- https://support.apple.com/en-us/HT214116 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214119 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214121 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214122 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214123 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214124 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214116 support.apple.com
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com
- https://support.apple.com/kb/HT214122 support.apple.com
- https://support.apple.com/kb/HT214124 support.apple.com