Lucene search

K
vulnrichmentAppleVULNRICHMENT:CVE-2024-40857
HistorySep 16, 2024 - 11:22 p.m.

CVE-2024-40857

2024-09-1623:22:32
apple
github.com
1
cve-2024-40857
state management
safari 18
visionos 2
watchos 11
macos sequoia 15
ios 18
ipados 18
universal cross site scripting

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

26.0%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

This issue was addressed through improved state management. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content may lead to universal cross site scripting.

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

26.0%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-40857