CVE-2024-23254

Опубликовано: 08 мар. 2024

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

The issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, Safari 17.4. A malicious website may exfiltrate audio data cross-origin.

Ссылки

http://seclists.org/fulldisclosure/2024/Mar/20
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/24
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/25
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/26
Mailing List
http://www.openwall.com/lists/oss-security/2024/03/26/1
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/
Mailing List
https://support.apple.com/en-us/HT214081
Vendor Advisory
https://support.apple.com/en-us/HT214084
Vendor Advisory
https://support.apple.com/en-us/HT214086
Vendor Advisory
https://support.apple.com/en-us/HT214087
Vendor Advisory
https://support.apple.com/en-us/HT214088
Vendor Advisory
https://support.apple.com/en-us/HT214089
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Mar/20
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/24
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/25
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/26
Mailing List
http://www.openwall.com/lists/oss-security/2024/03/26/1
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/
Mailing List

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 17.4 (исключая)

cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*

Версия до 17.4 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 17.4 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 14.4 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 17.4 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 1.1 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 10.4 (исключая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*

Версия до 2.44.0 (исключая)

cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*

Версия до 2.44.0 (исключая)

EPSS

Процентиль: 66%

0.00508

Низкий

6.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2024-23254

CVSS3: 6.5

ubuntu

почти 2 года назад

CVE-2024-23254

CVSS3: 6.5

redhat

почти 2 года назад

CVE-2024-23254

CVSS3: 6.5

debian

почти 2 года назад

The issue was addressed with improved UI handling. This issue is fixed ...

GHSA-62qm-vc7f-rm93

CVSS3: 6.5

github

почти 2 года назад

SUSE-SU-2024:1293-1

suse-cvrf

почти 2 года назад

Security update for webkit2gtk3

EPSS

Процентиль: 66%

0.00508

Низкий

6.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo