CVE-2024-27830
MEDIUM 6.5EPSS 0.7%
This issue was addressed through improved state management. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A maliciously crafted webpage may be able to fingerprint the user.
- Affected
- Apple · Safari · iOS and iPadOS · macOS · tvOS · visionOS · watchOS
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - EPSS
- 0.65% chance of exploitation in the next 30 days, 50th percentile
- Published
- 2024-06-10
- Updated
- 2026-04-02
Proof-of-concept exploits (1)
- Joe12387/safari-canvas-fingerprinting-exploit17★ · 2024-09-01
Security advisories
- https://support.apple.com/en-us/HT214101
- https://support.apple.com/en-us/HT214102
- https://support.apple.com/en-us/HT214103
- https://support.apple.com/en-us/HT214104
- https://support.apple.com/en-us/HT214106
- https://support.apple.com/en-us/HT214108
- http://seclists.org/fulldisclosure/2024/Jun/5