CVEvulnerability
CVE-2024-44155
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Description
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. Maliciously crafted web content may violate iframe sandboxing policy.
Affected configurations
• apple safari (< 18.0)
• apple ipados (< 17.7.1)
• apple iphone os (< 17.7.1)
• apple macos (< 15.0)
• apple watchos (< 11.0)
References
- https://support.apple.com/en-us/121238 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121240 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121241 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121250 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121567 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Oct/10 seclists.org