CVE-2024-23254
EUVD-2024-2077308.03.2024, 02:15
The issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, Safari 17.4. A malicious website may exfiltrate audio data cross-origin.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | safari | 𝑥 < 17.4 |
| apple | ipad_os | 𝑥 < 17.4 |
| apple | iphone_os | 𝑥 < 17.4 |
| apple | macos | 𝑥 < 14.4 |
| apple | tvos | 𝑥 < 17.4 |
| apple | visionos | 𝑥 < 1.1 |
| apple | watchos | 𝑥 < 10.4 |
| webkitgtk | webkitgtk | 𝑥 < 2.44.0 |
| wpewebkit | wpe_webkit | 𝑥 < 2.44.0 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| webkit2gtk |
| ||||||||||||||||
| wpewebkit |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| webkitgtk |
| ||||||||||||
| webkit2gtk |
| ||||||||||||
| qtwebkit-source |
| ||||||||||||
| wpewebkit |
| ||||||||||||
| qtwebkit-opensource-src |
|
References