A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 14
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Apple Safari
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
|
— |
17.4
|
|
Apple Ipados
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
|
— |
16.7.6
|
|
Apple Ipados
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
|
17.0
|
17.4
|
|
Apple Iphone_Os
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
|
— |
16.7.6
|
|
Apple Iphone_Os
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
|
17.0
|
17.4
|
|
Apple Macos
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
|
14.0
|
14.4
|
|
Apple Tvos
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
|
— |
17.4
|
|
Apple Visionos
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
|
— |
1.1
|
|
Apple Watchos
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
|
— |
10.4
|
|
Fedoraproject Fedora
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
|
— | — |
|
Fedoraproject Fedora
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
|
— | — |
|
Fedoraproject Fedora
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
|
— | — |
|
Webkitgtk Webkitgtk
cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*
|
— |
2.44.0
|
|
Wpewebkit Wpe_Webkit
cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*
|
— |
2.44.0
|
References 29
https://support.apple.com/en-us/120880
product-security@apple.com
https://support.apple.com/en-us/120881
product-security@apple.com
https://support.apple.com/en-us/120882
product-security@apple.com
https://support.apple.com/en-us/120883
product-security@apple.com
https://support.apple.com/en-us/120893
product-security@apple.com
https://support.apple.com/en-us/120894
product-security@apple.com
https://support.apple.com/en-us/120895
product-security@apple.com
http://seclists.org/fulldisclosure/2024/Mar/20
af854a3a-2127-422b-91ae-364da2661108
http://seclists.org/fulldisclosure/2024/Mar/21
af854a3a-2127-422b-91ae-364da2661108
http://seclists.org/fulldisclosure/2024/Mar/24
af854a3a-2127-422b-91ae-364da2661108
http://seclists.org/fulldisclosure/2024/Mar/25
af854a3a-2127-422b-91ae-364da2661108
http://seclists.org/fulldisclosure/2024/Mar/26
af854a3a-2127-422b-91ae-364da2661108
http://www.openwall.com/lists/oss-security/2024/03/26/1
af854a3a-2127-422b-91ae-364da2661108
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
af854a3a-2127-422b-91ae-364da2661108
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
af854a3a-2127-422b-91ae-364da2661108
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
af854a3a-2127-422b-91ae-364da2661108
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj…
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/en-us/HT214081
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/en-us/HT214082
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/en-us/HT214084
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/en-us/HT214086
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/en-us/HT214087
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/en-us/HT214088
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/en-us/HT214089
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/kb/HT214081
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/kb/HT214082
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/kb/HT214084
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/kb/HT214087
af854a3a-2127-422b-91ae-364da2661108
https://support.apple.com/kb/HT214089
af854a3a-2127-422b-91ae-364da2661108