ByteOS Network

CVE Vulnerability Details :

CVE-2024-27838

PUBLISHED

More Info Official Page

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-10 Jun, 2024 | 20:56

Updated At-02 Apr, 2026 | 18:16

▼CVE Numbering Authority (CNA)

The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. A maliciously crafted webpage may be able to fingerprint the user.

Affected Products

Vendor

Apple Inc.

Product

Safari

Versions

Affected

From 0 before 17.5 (custom)

Vendor

Apple Inc.

Product

iOS and iPadOS

Versions

Affected

From 0 before 16.7.8 (custom)
From 0 before 17.5 (custom)

Vendor

Apple Inc.

Product

macOS

Versions

Affected

From 0 before 14.5 (custom)

Vendor

Apple Inc.

Product

tvOS

Versions

Affected

From 0 before 17.5 (custom)

Vendor

Apple Inc.

Product

visionOS

Versions

Affected

From 0 before 1.2 (custom)

Vendor

Apple Inc.

Product

watchOS

Versions

Affected

From 0 before 10.5 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	A maliciously crafted webpage may be able to fingerprint the user

Type: N/A

CWE ID: N/A

Description: A maliciously crafted webpage may be able to fingerprint the user

References

Hyperlink	Resource
https://support.apple.com/en-us/120896	N/A
https://support.apple.com/en-us/120898	N/A
https://support.apple.com/en-us/120901	N/A
https://support.apple.com/en-us/120902	N/A
https://support.apple.com/en-us/120903	N/A
https://support.apple.com/en-us/120905	N/A
https://support.apple.com/en-us/120906	N/A

Hyperlink: https://support.apple.com/en-us/120896

Resource: N/A

Hyperlink: https://support.apple.com/en-us/120898

Resource: N/A

Hyperlink: https://support.apple.com/en-us/120901

Resource: N/A

Hyperlink: https://support.apple.com/en-us/120902

Resource: N/A

Hyperlink: https://support.apple.com/en-us/120903

Resource: N/A

Hyperlink: https://support.apple.com/en-us/120905

Resource: N/A

Hyperlink: https://support.apple.com/en-us/120906

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT214101	x_transferred
https://support.apple.com/en-us/HT214100	x_transferred
https://support.apple.com/en-us/HT214106	x_transferred
https://support.apple.com/en-us/HT214108	x_transferred
https://support.apple.com/en-us/HT214104	x_transferred
https://support.apple.com/en-us/HT214103	x_transferred
https://support.apple.com/en-us/HT214102	x_transferred
http://seclists.org/fulldisclosure/2024/Jun/5	x_transferred
https://support.apple.com/kb/HT214108	N/A
https://support.apple.com/kb/HT214106	N/A
https://support.apple.com/kb/HT214104	N/A
https://support.apple.com/kb/HT214102	N/A
https://support.apple.com/kb/HT214100	N/A

Hyperlink: https://support.apple.com/en-us/HT214101

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214100

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214106

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214108

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214104

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214103

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214102

Resource:

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2024/Jun/5

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT214108

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT214106

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT214104

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT214102

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT214100

Resource: N/A

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-79	CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Type: CWE

CWE ID: CWE-79

Description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Metrics

Version	Base score	Base severity	Vector
3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected Products

Affected

Affected

Affected

Affected

Affected

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References