CVE-2024-23271
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.3epss 0.8%
exploitation probability
0.8%top 45% of all CVEs
observed exploitation
nono source reports it
A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
https://support.apple.com/en-us/120304https://support.apple.com/en-us/120306https://support.apple.com/en-us/120309https://support.apple.com/en-us/120311https://support.apple.com/en-us/120339https://support.apple.com/en-us/HT214055https://support.apple.com/en-us/HT214056https://support.apple.com/en-us/HT214059https://support.apple.com/en-us/HT214060https://support.apple.com/en-us/HT214061https://support.apple.com/kb/HT214055https://support.apple.com/kb/HT214056