This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the user.
History

Thu, 26 Sep 2024 02:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-200
References

Wed, 25 Sep 2024 19:45:00 +0000

Type Values Removed Values Added
Title webkitgtk: A maliciously crafted webpage may be able to fingerprint the user
References
Metrics threat_severity

None

threat_severity

Moderate


cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2024-06-10T20:56:45.824Z

Updated: 2024-08-02T00:41:55.341Z

Reserved: 2024-02-26T15:32:28.532Z

Link: CVE-2024-27850

cve-icon Vulnrichment

Updated: 2024-08-02T00:41:55.341Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-10T21:15:51.607

Modified: 2024-07-03T16:14:52.247

Link: CVE-2024-27850

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-09-25T00:00:00Z

Links: CVE-2024-27850 - Bugzilla