Description
A window management issue was addressed with improved state management. This issue is fixed in Safari 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Visiting a website that frames malicious content may lead to UI spoofing.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apple iOS and iPadOS
unspecified to < 17affected
Apple Safari
unspecified to < 17affected
Apple macOS
unspecified to < 14affected
Apple watchOS
unspecified to < 10affected
References
- https://support.apple.com/en-us/HT213938 ↗
- https://support.apple.com/en-us/HT213941 ↗
- https://support.apple.com/en-us/HT213940 ↗
- https://support.apple.com/en-us/HT213937 ↗
- http://seclists.org/fulldisclosure/2023/Oct/2 ↗
- http://seclists.org/fulldisclosure/2023/Oct/8 ↗
- http://seclists.org/fulldisclosure/2023/Oct/9 ↗
- http://seclists.org/fulldisclosure/2023/Oct/3 ↗
- https://support.apple.com/kb/HT213941 ↗
- https://support.apple.com/kb/HT213938 ↗
- https://support.apple.com/kb/HT213937 ↗