ZeroHour

CVE-2024-40857

CVSS 3.1
6.1 medium
EPSS
<1%p44
Published
()
Modified
Description

This issue was addressed through improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to universal cross site scripting.

Vendors
apple
Products
safari, ipados, iphone os, macos, tvos, visionos, watchos
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.