CVE-2024-23206

보통 6.5CVE-2024-23206 · Published 23/01/2024 · updated 17/06/2026

요약

CVE-2024-23206은(는) safari (apple)에 영향을 주는 보통 (CVSS 6.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.92%, 전체 취약점의 60.4%보다 높음.
조치: 17.3 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
safari apple	`< 17.3`	`17.3`

Description

An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A maliciously crafted webpage may be able to fingerprint the user.

References

support.apple.com/en-us/120304
support.apple.com/en-us/120306
support.apple.com/en-us/120309
support.apple.com/en-us/120310
support.apple.com/en-us/120311
support.apple.com/en-us/120339
seclists.org/fulldisclosure/2024/Jan/27 · Third Party Advisory
seclists.org/fulldisclosure/2024/Jan/33 · Third Party Advisory
seclists.org/fulldisclosure/2024/Jan/34 · Third Party Advisory
seclists.org/fulldisclosure/2024/Jan/36 · Third Party Advisory
seclists.org/fulldisclosure/2024/Jan/39 · Third Party Advisory
seclists.org/fulldisclosure/2024/Jan/40 · Third Party Advisory
openwall.com/lists/oss-security/2024/02/05/8
lists.fedoraproject.org/archives/list/[email protected]/message/US43EQFC2IS66EA2CPAZFH2RQ6WD7PKF

safari의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free