Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-44206

An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple Safari

  • 0 to < 17.6affected

Apple iOS and iPadOS

  • 0 to < 17.6affected

Apple macOS

  • 0 to < 14.6affected

Apple tvOS

  • 0 to < 17.6affected

Apple visionOS

  • 0 to < 1.3affected

Apple watchOS

  • 0 to < 10.6affected

References