CVE-2024-40866

2024-09-1623:22:28

apple

www.cve.org

address bar spoofing

safari 18

macos sequoia 15

malicious website

EPSS

0.001

Percentile

18.5%

JSON

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "15",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "Safari",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "18",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/121238

support.apple.com/en-us/121241

EPSS

0.001

Percentile

18.5%

JSON

Related for CVELIST:CVE-2024-40866