CVE-2024-23254

2024-03-0802:15:48

Google

osv.dev

cve-2024-23254

ui handling

apple operating systems

audio data exfiltration

5.1 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

The issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, Safari 17.4. A malicious website may exfiltrate audio data cross-origin.

CPENameOperatorVersion
webkit2gtkeq2.40.3-2~deb12u1
webkit2gtkeq2.26.1-1
webkit2gtkeq2.32.3-1~deb10u1
webkit2gtkeq2.34.0-1
webkit2gtkeq2.39.7-1
webkit2gtkeq2.42.2-1
webkit2gtkeq2.41.92-1
webkit2gtkeq2.44.2-1~deb12u1
webkit2gtkeq2.32.4-1~deb10u1
webkit2gtkeq2.42.1-1

Name	Operator	Version
webkit2gtk	eq	2.40.3-2~deb12u1
webkit2gtk	eq	2.26.1-1
webkit2gtk	eq	2.32.3-1~deb10u1
webkit2gtk	eq	2.34.0-1
webkit2gtk	eq	2.39.7-1
webkit2gtk	eq	2.42.2-1
webkit2gtk	eq	2.41.92-1
webkit2gtk	eq	2.44.2-1~deb12u1
webkit2gtk	eq	2.32.4-1~deb10u1
webkit2gtk	eq	2.42.1-1