← back
CVE-2024-40817mediumCWE-1021

CVE-2024-40817

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.7%
exploitation probability
0.7%top 49% of all CVEs
observed exploitation
nono source reports it
The issue was addressed with improved UI handling. This issue is fixed in Safari 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Visiting a website that frames malicious content may lead to UI spoofing.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Apple · macOSApple · Safari
References
http://seclists.org/fulldisclosure/2024/Jul/15http://seclists.org/fulldisclosure/2024/Jul/18http://seclists.org/fulldisclosure/2024/Jul/19http://seclists.org/fulldisclosure/2024/Jul/20https://support.apple.com/en-us/120910https://support.apple.com/en-us/120911https://support.apple.com/en-us/120912https://support.apple.com/en-us/120913https://support.apple.com/en-us/HT214118https://support.apple.com/en-us/HT214119https://support.apple.com/en-us/HT214120https://support.apple.com/en-us/HT214121