CVE-2024-27851
published 2024-06-10CVE-2024-27851: The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2…
high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_17.5_and_ipados | — | — |
| apple | ios_and_ipados | < 17.5 | 17.5 |
| apple | ipados | < 17.5 | 17.5 |
| apple | iphone_os | < 17.5 | 17.5 |
| apple | macos | < 14.5 | 14.5 |
| apple | macos | >= 14.0 < 14.5 | 14.5 |
| apple | macos_sonoma | — | — |
| apple | safari | < 17.5 | 17.5 |
| apple | safari | — | — |
| apple | tvos | < 17.5 | 17.5 |
| apple | tvos | — | — |
| apple | visionos | < 1.2 | 1.2 |
| apple | visionos | — | — |
| apple | watchos | < 10.5 | 10.5 |
| apple | watchos | — | — |
| debian | webkit2gtk | < webkit2gtk 2.44.3-1~deb12u1 (bookworm) | webkit2gtk 2.44.3-1~deb12u1 (bookworm) |
| debian | wpewebkit | < webkit2gtk 2.44.3-1~deb12u1 (bookworm) | webkit2gtk 2.44.3-1~deb12u1 (bookworm) |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH