Vulnerability · NVD
CVE-2024-23254
MEDIUM 6.5
The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfiltrate audio data cross-origin.
Attack vector : Network
No privileges required
Show raw CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
1.25%
above median
percentile 66.7%
OS versions that fix this CVE
This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.