The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to arbitrary code execution.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT214101 | Vendor Advisory |
https://support.apple.com/en-us/HT214106 | Vendor Advisory |
https://support.apple.com/en-us/HT214108 | Vendor Advisory |
https://support.apple.com/en-us/HT214104 | Vendor Advisory |
https://support.apple.com/en-us/HT214103 | Vendor Advisory |
https://support.apple.com/en-us/HT214102 | Vendor Advisory |
http://seclists.org/fulldisclosure/2024/Jun/5 | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Jul 2024, 13:25
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
First Time |
Apple
Apple ipados Apple macos Apple iphone Os Apple safari Apple visionos Apple tvos Apple watchos |
|
References | () https://support.apple.com/en-us/HT214108 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214106 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214104 - Vendor Advisory | |
References | () http://seclists.org/fulldisclosure/2024/Jun/5 - Mailing List, Third Party Advisory | |
References | () https://support.apple.com/en-us/HT214101 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214102 - Vendor Advisory | |
References | () https://support.apple.com/en-us/HT214103 - Vendor Advisory | |
CWE | NVD-CWE-noinfo | |
CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* |
12 Jun 2024, 04:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Jun 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-10 21:15
Updated : 2024-07-03 01:50
NVD link : CVE-2024-27808
Mitre link : CVE-2024-27808
JSON object : View
Products Affected
apple
- tvos
- watchos
- ipados
- safari
- macos
- visionos
- iphone_os
CWE