CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NCVE-2024-23254
Medium (6.5). EPSS 1.3% chance of exploitation in the next 30 days.
The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfiltrate audio data cross-origin.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:ipad_os
- apple:iphone_os
- apple:macos
- apple:safari
- apple:tvos
- apple:visionos
- apple:watchos
- fedoraproject:fedora
- webkitgtk:webkitgtk
- wpewebkit:wpe_webkit