CVE-2024-44187

Name of the Vulnerable Software and Affected Versions Safari version 18 visionOS version 2 watchOS version 11 macOS Sequoia version 15 iOS version 18 iPadOS version 18 tvOS version 18

Description A cross-origin issue existed with iframe elements, allowing a malicious website to exfiltrate data cross-origin. This issue was addressed with improved tracking of security origins.

Recommendations For Safari version 18, no additional action is required as the issue is fixed. For visionOS version 2, no additional action is required as the issue is fixed. For watchOS version 11, no additional action is required as the issue is fixed. For macOS Sequoia version 15, no additional action is required as the issue is fixed. For iOS version 18, no additional action is required as the issue is fixed. For iPadOS version 18, no additional action is required as the issue is fixed. For tvOS version 18, no additional action is required as the issue is fixed. As a temporary workaround for older versions, consider disabling the use of iframe elements until a patch is available.