CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NCVE-2024-23280
Medium (6.5). EPSS 1.3% chance of exploitation in the next 30 days.
An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may be able to fingerprint the user.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-74
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:ipad_os
- apple:iphone_os
- apple:macos
- apple:safari
- apple:tvos
- apple:watchos
- fedoraproject:fedora
- webkitgtk:webkitgtk
- wpewebkit:wpe_webkit