This issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to a cross site scripting attack.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Apple
  • Ipados
  • Iphone Os
  • Macos
  • Safari
  • Tvos
  • Visionos
  • Watchos

Configuration 1 [-]

OR cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Configuration 3 [-]

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Configuration 4 [-]

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Configuration 5 [-]

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Configuration 6 [-]

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Configuration 7 [-]

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

No data.

References
Link Providers
http://seclists.org/fulldisclosure/2024/Jul/15 cve-icon cve-icon cve-icon
http://seclists.org/fulldisclosure/2024/Jul/16 cve-icon cve-icon cve-icon
http://seclists.org/fulldisclosure/2024/Jul/17 cve-icon cve-icon cve-icon
http://seclists.org/fulldisclosure/2024/Jul/18 cve-icon cve-icon cve-icon
http://seclists.org/fulldisclosure/2024/Jul/21 cve-icon cve-icon cve-icon
http://seclists.org/fulldisclosure/2024/Jul/22 cve-icon cve-icon cve-icon
http://seclists.org/fulldisclosure/2024/Jul/23 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-40785 cve-icon
https://support.apple.com/en-us/HT214116 cve-icon cve-icon cve-icon
https://support.apple.com/en-us/HT214117 cve-icon cve-icon cve-icon
https://support.apple.com/en-us/HT214119 cve-icon cve-icon cve-icon
https://support.apple.com/en-us/HT214121 cve-icon cve-icon cve-icon
https://support.apple.com/en-us/HT214122 cve-icon cve-icon cve-icon
https://support.apple.com/en-us/HT214123 cve-icon cve-icon cve-icon
https://support.apple.com/en-us/HT214124 cve-icon cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-40785 cve-icon
History

Thu, 15 Aug 2024 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ipados
Apple iphone Os
Apple macos
Apple safari
Apple tvos
Apple visionos
Apple watchos
Weaknesses CWE-79
CPEs cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple ipados
Apple iphone Os
Apple macos
Apple safari
Apple tvos
Apple visionos
Apple watchos
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2024-07-29T22:16:56.242Z

Updated: 2024-08-02T04:39:54.895Z

Reserved: 2024-07-10T17:11:04.689Z

Link: CVE-2024-40785

cve-icon Vulnrichment

Updated: 2024-08-02T04:39:54.895Z

cve-icon NVD

Status : Modified

Published: 2024-07-29T23:15:11.997

Modified: 2024-11-21T09:31:37.503

Link: CVE-2024-40785

cve-icon Redhat

Severity : Important

Publid Date: 2024-07-31T00:00:00Z

Links: CVE-2024-40785 - Bugzilla