VYPR
Get started
← All advisories
Medium severity6.5NVD Advisory· Published Mar 8, 2024· Updated Apr 2, 2026

CVE-2024-23280

CVE-2024-23280

Description

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may be able to fingerprint the user.

Affected products

11
  • Apple Inc./Safari
    cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
    Range: <17.4
  • Webkitgtk/Webkitgtk\+
    cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*
    Range: <2.44.0
  • Wpewebkit/Wpe Webkit
    cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*
    Range: <2.44.0
  • Apple Inc./Ipados
    cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*
    Range: <17.4
  • Apple Inc./Iphone Os
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <17.4
  • Apple Inc./macOS
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
    Range: >=14.0,<14.4
  • Apple Inc./tvOS
    cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
    Range: <17.4
  • Apple Inc./watchOS
    cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
    Range: <10.4
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

23

News mentions

0

No linked articles in our index yet.