Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-23263
HistoryMar 08, 2024 - 12:00 a.m.

CVE-2024-23263

2024-03-0800:00:00
ubuntu.com
ubuntu.com
11
logic issue validation fixed
tvos 17.4
macos sonoma 14.4
visionos 1.1
ios 17.4
ipados 17.4
watchos 10.4
safari 17.4
maliciously crafted web content
content security policy

5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

A logic issue was addressed with improved validation. This issue is fixed
in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4,
watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, Safari 17.4. Processing
maliciously crafted web content may prevent Content Security Policy from
being enforced.

Notes

Author Note
jdstrand webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8
mdeslaur It is no longer possible to build new webkit2gtk versions on focal and earlier. Marking as ignored.

5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%