PT-2024-31039 · Apple · Visionos+7

Andreas Jaegersberger + 1 · Published 2024-07-29 · Updated 2024-11-19 · CVE-2024-44206

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 watchOS versions prior to 10.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 macOS Sonoma versions prior to 14.6

Description An issue in the handling of URL protocols was addressed with improved logic, which may allow a user to bypass some web content restrictions.

Recommendations For Safari version prior to 17.6, update to version 17.6 or later. For tvOS version prior to 17.6, update to version 17.6 or later. For visionOS version prior to 1.3, update to version 1.3 or later. For watchOS version prior to 10.6, update to version 10.6 or later. For iOS version prior to 17.6, update to version 17.6 or later. For iPadOS version prior to 17.6, update to version 17.6 or later. For macOS Sonoma version prior to 14.6, update to version 14.6 or later.

Fix

Related Identifiers

CVE-2024-44206

Affected Products

Apple Macos

Safari

Ios

Ipados

Macos Sonoma

Tvos

Visionos

Watchos

References · 12

• https://support.apple.com/en-us/120915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44206 · Security Note
• https://support.apple.com/en-us/120914 · Vendor Advisory
• https://support.apple.com/en-us/120909 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-44206 · Vendor Advisory
• https://support.apple.com/en-us/120913 · Vendor Advisory
• https://support.apple.com/en-us/120911 · Vendor Advisory
• https://support.apple.com/en-us/120916 · Vendor Advisory
• http://seclists.org/fulldisclosure/2024/Nov/6 · Note
• https://t.me/cvedetector/8815 · Telegram Post
• https://t.me/cvenotify/102133 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44206 · Note