CVE-2024-44187

2024-09-1623:23:16

apple

github.com

cross-origin

apple

safari

macos

ios

ipados

tvos

watchos

security origin

exfiltrate data

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

31.3%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

A cross-origin issue existed with “iframe” elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin.