CVE-2024-44187
6.5MEDIUMA cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 a
Опубликовано: 9/17/2024Обновлено: 11/4/2025
Описание
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin.
ИИ-АнализНа базе ИИ
Затронутые продукты
applesafari
appleipados
appleiphone_os
applemacos
appletvos
applevisionos
applewatchos
Ссылки
- https://support.apple.com/en-us/121238Release NotesVendor Advisory
- https://support.apple.com/en-us/121240Release NotesVendor Advisory
- https://support.apple.com/en-us/121241Release NotesVendor Advisory
- https://support.apple.com/en-us/121248Release NotesVendor Advisory
- https://support.apple.com/en-us/121249Release NotesVendor Advisory
- https://support.apple.com/en-us/121250Release NotesVendor Advisory
- http://seclists.org/fulldisclosure/2024/Sep/32
- http://seclists.org/fulldisclosure/2024/Sep/33
- http://seclists.org/fulldisclosure/2024/Sep/36
- http://seclists.org/fulldisclosure/2024/Sep/37
- https://lists.debian.org/debian-lts-announce/2024/11/msg00019.html