CVE-2024-23271

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Apr 24, 2024
Source updated: Apr 2, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Safari

Vendor: Apple
Product: Safari
Platforms: Unknown
Default status: Unknown

Safari · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	17.3	Unavailable	None listed

iOS and iPadOS

Vendor: Apple
Product: iOS and iPadOS
Platforms: Unknown
Default status: Unknown

iOS and iPadOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	17.3	Unavailable	None listed

macOS

Vendor: Apple
Product: macOS
Platforms: Unknown
Default status: Unknown

macOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	14.3	Unavailable	None listed

tvOS

Vendor: Apple
Product: tvOS
Platforms: Unknown
Default status: Unknown

tvOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	17.3	Unavailable	None listed

watchOS

Vendor: Apple
Product: watchOS
Platforms: Unknown
Default status: Unknown

watchOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	10.3	Unavailable	None listed