ghsa-62qm-vc7f-rm93
Vulnerability from github
Published
2024-03-08 03:31
Modified
2024-05-07 06:30
Details
The issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, Safari 17.4. A malicious website may exfiltrate audio data cross-origin.
{ "affected": [], "aliases": [ "CVE-2024-23254" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-08T02:15:48Z", "severity": null }, "details": "The issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, Safari 17.4. A malicious website may exfiltrate audio data cross-origin.", "id": "GHSA-62qm-vc7f-rm93", "modified": "2024-05-07T06:30:35Z", "published": "2024-03-08T03:31:25Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23254" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4" }, { "type": "WEB", "url": "https://support.apple.com/en-us/HT214081" }, { "type": "WEB", "url": "https://support.apple.com/en-us/HT214084" }, { "type": "WEB", "url": "https://support.apple.com/en-us/HT214086" }, { "type": "WEB", "url": "https://support.apple.com/en-us/HT214087" }, { "type": "WEB", "url": "https://support.apple.com/en-us/HT214088" }, { "type": "WEB", "url": "https://support.apple.com/en-us/HT214089" }, { "type": "WEB", "url": "http://seclists.org/fulldisclosure/2024/Mar/20" }, { "type": "WEB", "url": "http://seclists.org/fulldisclosure/2024/Mar/21" }, { "type": "WEB", "url": "http://seclists.org/fulldisclosure/2024/Mar/24" }, { "type": "WEB", "url": "http://seclists.org/fulldisclosure/2024/Mar/25" }, { "type": "WEB", "url": "http://seclists.org/fulldisclosure/2024/Mar/26" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2024/03/26/1" } ], "schema_version": "1.4.0", "severity": [] }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.