CVE-2024-27850
EUVD-2024-2504310.06.2024, 21:15
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. A maliciously crafted webpage may be able to fingerprint the user.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | safari | 𝑥 < 17.5 |
| apple | ipados | 𝑥 < 17.5 |
| apple | iphone_os | 𝑥 < 17.5 |
| apple | macos | 14.0 ≤ 𝑥 < 14.5 |
| apple | visionos | 𝑥 < 1.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| apple | visionos | 𝑥 < 1.2 | ADP |
| apple | macos | 𝑥 < 14.5 | ADP |
| apple | safari | 𝑥 < 17.5 | ADP |
| apple | iphone_os | 𝑥 < 17.5 | ADP |
| apple | ipad_os | 𝑥 < 17.5 | ADP |
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| qtwebkit-opensource-src |
| ||||||||||
| qtwebkit-source |
| ||||||||||
| webkit2gtk |
| ||||||||||
| webkitgtk |
| ||||||||||
| wpewebkit |
|
Amazon Linux Releases
References