CVE-2024-23284

2024-03-0802:15:49

Google

osv.dev

logic issue

apple

os versions

state management

content security policy

malicious web content

5.2 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

A logic issue was addressed with improved state management. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, Safari 17.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

CPENameOperatorVersion
webkit2gtkeq2.40.3-2~deb12u1
webkit2gtkeq2.26.1-1
webkit2gtkeq2.32.3-1~deb10u1
webkit2gtkeq2.34.0-1
webkit2gtkeq2.39.7-1
webkit2gtkeq2.42.2-1
webkit2gtkeq2.41.92-1
webkit2gtkeq2.44.2-1~deb12u1
webkit2gtkeq2.32.4-1~deb10u1
webkit2gtkeq2.42.1-1

Name	Operator	Version
webkit2gtk	eq	2.40.3-2~deb12u1
webkit2gtk	eq	2.26.1-1
webkit2gtk	eq	2.32.3-1~deb10u1
webkit2gtk	eq	2.34.0-1
webkit2gtk	eq	2.39.7-1
webkit2gtk	eq	2.42.2-1
webkit2gtk	eq	2.41.92-1
webkit2gtk	eq	2.44.2-1~deb12u1
webkit2gtk	eq	2.32.4-1~deb10u1
webkit2gtk	eq	2.42.1-1