CVEvulnerability
CVE-2024-44206
9.3 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2024-10-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.3 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Description
An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.
Affected configurations
• apple safari (< 17.6)
• apple ipados (< 17.6)
• apple iphone os (< 17.6)
• apple macos (< 14.6)
• apple tvos (< 17.6)
• apple visionos (< 1.3)
References
- https://support.apple.com/en-us/120909 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120911 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120913 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120914 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120915 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120916 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Nov/6 seclists.org