CVE-2024-23280

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Mar 8, 2024
Source updated: Apr 2, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may be able to fingerprint the user.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Safari

Vendor: Apple
Product: Safari
Platforms: Unknown
Default status: Unknown

Safari · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	17.4	Unavailable	None listed

iOS and iPadOS

Vendor: Apple
Product: iOS and iPadOS
Platforms: Unknown
Default status: Unknown

iOS and iPadOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	17.4	Unavailable	None listed

macOS

Vendor: Apple
Product: macOS
Platforms: Unknown
Default status: Unknown

macOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	14.4	Unavailable	None listed

tvOS

Vendor: Apple
Product: tvOS
Platforms: Unknown
Default status: Unknown

tvOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	17.4	Unavailable	None listed

watchOS

Vendor: Apple
Product: watchOS
Platforms: Unknown
Default status: Unknown

watchOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	10.4	Unavailable	None listed