Skip to content
8.1 High

CVE-2024-23246 This issue was addressed by removing the vulnerable code

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to break out of its sandbox.

Affected products and versions

Product Affected versions Fixed in
visionOS 1.1 earliest → < 1.1 1.1
tvOS 17.4 earliest → < 17.4 17.4
iOS and iPadOS 17.4 earliest → < 17.4 17.4
iOS and iPadOS 16.7 earliest → < 16.7.6 16.7.6
macOS 14.4 earliest → < 14.4 14.4
watchOS 10.4 earliest → < 10.4 10.4
iphone_os 17.0 17.0 → < 17.4 17.4
ipad_os 17.0 17.0 → < 17.4 17.4
Safari 17.4 earliest → < 17.4 17.4
Show the other branch
Product Affected versions Fixed in
webkitgtk 2.45 earliest → < 2.45.2 2.45.2

References

Timeline

  1. Published
  2. Last modified
The 834 CVEs of visionOS →
Track this CVE