Input Validation Flaw in iOS and iPadOS by Apple
CVE-2024-40867

9.6CRITICAL

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Vendor
CVE Published:
28 October 2024

What is CVE-2024-40867?

A vulnerability exists in Apple's iOS and iPadOS that pertains to the handling of custom URL schemes. The issue stems from inadequate input validation, which could allow remote attackers to escape the confines of the Web Content sandbox. This flaw emphasizes the importance of robust oversight in input validation mechanisms to prevent potential exploitation. The vulnerability has been addressed in recent updates, specifically versions 18.1 of iOS and iPadOS.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iOS and iPadOS < 18.1

References

https://support.apple.com/en-us/121563

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.