Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xq2q-rgqf-8r75

Опубликовано: 10 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.

EPSS

Процентиль: 17%
0.00053
Низкий

7.5 High

CVSS3

Дефекты

CWE-451

Связанные уязвимости

CVSS3: 2.8
nvd
11 месяцев назад

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.

CVSS3: 3.9
fstec
11 месяцев назад

Уязвимость компонента TCC операционных систем macOS, iOS и iPadOS, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00053
Низкий

7.5 High

CVSS3

Дефекты

CWE-451