CVE-2024-27850

Description

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the user.

Reserved 2024-02-26 | Published 2024-06-10 | Updated 2025-02-13 | Assigner apple

Problem types

A maliciously crafted webpage may be able to fingerprint the user

Product status

Any version before 17.5
affected

Any version before 14.5
affected

Any version before 1.2
affected

Any version before 17.5
affected

References

support.apple.com/en-us/HT214101

support.apple.com/en-us/HT214106

support.apple.com/en-us/HT214108

support.apple.com/en-us/HT214103

seclists.org/fulldisclosure/2024/Jun/5

cve.org (CVE-2024-27850)

nvd.nist.gov (CVE-2024-27850)

Download JSON