Description
The issue was addressed with improved UI handling. This issue is fixed in Safari 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Visiting a website that frames malicious content may lead to UI spoofing.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apple Safari
0 to < 17.6affected
Apple macOS
0 to < 12.7.6affected0 to < 13.6.8affected0 to < 14.6affected
References
- https://support.apple.com/en-us/120910 ↗
- https://support.apple.com/en-us/120911 ↗
- https://support.apple.com/en-us/120912 ↗
- https://support.apple.com/en-us/120913 ↗
- https://support.apple.com/en-us/HT214121 ↗
- https://support.apple.com/en-us/HT214120 ↗
- https://support.apple.com/en-us/HT214119 ↗
- https://support.apple.com/en-us/HT214118 ↗
- https://support.apple.com/kb/HT214121 ↗
- http://seclists.org/fulldisclosure/2024/Jul/15 ↗
- http://seclists.org/fulldisclosure/2024/Jul/20 ↗
- http://seclists.org/fulldisclosure/2024/Jul/18 ↗
- http://seclists.org/fulldisclosure/2024/Jul/19 ↗
- https://support.apple.com/kb/HT214120 ↗
- https://support.apple.com/kb/HT214119 ↗
- https://support.apple.com/kb/HT214118 ↗