CVE-2024-27830

Description

This issue was addressed through improved state management. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. A maliciously crafted webpage may be able to fingerprint the user.

PUBLISHED Reserved 2024-02-26 | Published 2024-06-10 | Updated 2026-04-02 | Assigner apple

Problem types

A maliciously crafted webpage may be able to fingerprint the user

Product status

References

support.apple.com/en-us/HT214101

support.apple.com/en-us/HT214106

support.apple.com/en-us/HT214108

support.apple.com/en-us/HT214104

support.apple.com/en-us/HT214103

support.apple.com/en-us/HT214102

seclists.org/fulldisclosure/2024/Jun/5

support.apple.com/kb/HT214108

support.apple.com/kb/HT214106

support.apple.com/kb/HT214104

support.apple.com/kb/HT214102

support.apple.com/en-us/120896

support.apple.com/en-us/120901

support.apple.com/en-us/120902

support.apple.com/en-us/120903

support.apple.com/en-us/120905

support.apple.com/en-us/120906

cve.org (CVE-2024-27830)

nvd.nist.gov (CVE-2024-27830)

Download JSON