Apple Safari Fixes Cross-Site Scripting Vulnerability
CVE-2024-40785

6.1MEDIUM

Key Information:

Vendor
Apple
Status
Safari
iOS And iPad OS
Watch OS
Mac OS
Vendor
CVE Published:
29 July 2024

Summary

This issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to a cross site scripting attack.

Affected Version(s)

iOS and iPadOS < 17.6

iOS and iPadOS < 16.7

macOS < 14.6

References

https://support.apple.com/en-us/HT214121
https://support.apple.com/en-us/HT214117
https://support.apple.com/en-us/HT214116

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.