CVE-2024-40867

Description

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.

Reserved 2024-07-10 | Published 2024-10-28 | Updated 2024-11-01 | Assigner apple

Problem types

A remote attacker may be able to break out of Web Content sandbox

Product status

Any version before 18.1
affected

References

support.apple.com/en-us/121563

cve.org (CVE-2024-40867)

nvd.nist.gov (CVE-2024-40867)

Download JSON