CVE-2024-40780

MEDIO 5.5CVE-2024-40780 · Published 29/07/2024 · updated 17/06/2026

En resumen

CVE-2024-40780 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a safari (apple).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.70%, mayor que el 53.2% de las vulnerabilidades.
Solución: actualizar a 17.6 o posterior.

Package	Affected versions	Patched versions
safari apple	`< 17.6`	`17.6`

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.

References

support.apple.com/en-us/120908
support.apple.com/en-us/120909
support.apple.com/en-us/120911
support.apple.com/en-us/120913
support.apple.com/en-us/120914
support.apple.com/en-us/120915
support.apple.com/en-us/120916
seclists.org/fulldisclosure/2024/Jul/15 · Mailing List
seclists.org/fulldisclosure/2024/Jul/16 · Mailing List
seclists.org/fulldisclosure/2024/Jul/17 · Mailing List
seclists.org/fulldisclosure/2024/Jul/18 · Mailing List
seclists.org/fulldisclosure/2024/Jul/21 · Mailing List
seclists.org/fulldisclosure/2024/Jul/22 · Mailing List
seclists.org/fulldisclosure/2024/Jul/23 · Mailing List
lists.debian.org/debian-lts-announce/2024/09/msg00006.html
support.apple.com/en-us/HT214116 · Release Notes
support.apple.com/en-us/HT214117 · Release Notes
support.apple.com/en-us/HT214119 · Release Notes
support.apple.com/en-us/HT214121 · Release Notes
support.apple.com/en-us/HT214122 · Release Notes
support.apple.com/en-us/HT214123 · Release Notes
support.apple.com/en-us/HT214124 · Release Notes
support.apple.com/kb/HT214116
support.apple.com/kb/HT214117
support.apple.com/kb/HT214119
support.apple.com/kb/HT214122
support.apple.com/kb/HT214123
support.apple.com/kb/HT214124

Más vulnerabilidades de safari

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free