Skip to content
fr Sign in
6.5 Medium

CVE-2024-23254 The issue was addressed with improved UI handling

Description

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfiltrate audio data cross-origin.

Affected products and versions

Product Affected versions Fixed in
visionOS 1.1 earliest → < 1.1 1.1
tvOS 17.4 earliest → < 17.4 17.4
iOS and iPadOS 17.4 earliest → < 17.4 17.4
Safari 17.4 earliest → < 17.4 17.4
macOS 14.4 earliest → < 14.4 14.4
watchOS 10.4 earliest → < 10.4 10.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of visionOS

The 834 CVEs of visionOS →
CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High
Track this CVE