PT-2024-30990

CVE-2024-44155

·

تاريخ النشر

2024-09-16

·

تاريخ التحديث

2024-10-29

الوصف من

CVSS 3.1
6.5
متوسطة
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Safari versions prior to 18 iOS versions prior to 17.7.1 iPadOS versions prior to 17.7.1 macOS versions prior to Sequoia 15 watchOS versions prior to 11
Description A custom URL scheme handling issue was addressed with improved input validation. Maliciously crafted web content may violate iframe sandboxing policy.
Recommendations For Safari versions prior to 18, update to Safari 18 or later. For iOS versions prior to 17.7.1, update to iOS 17.7.1 or later. For iPadOS versions prior to 17.7.1, update to iPadOS 17.7.1 or later. For macOS versions prior to Sequoia 15, update to macOS Sequoia 15 or later. For watchOS versions prior to 11, update to watchOS 11 or later.
قابلية الاستغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾