Paper/Archive/CVE-2024-40782

CVE-2024-40782

Apple Safari — A use-after-free issue was addressed with improved memory management.

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 62.2.622 × 2012.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Affected

ProductAffectedFixed inSource

Safari< 17.617.6CNA

iOS and iPadOS< 16.7.916.7.9CNA

iOS and iPadOS< 17.617.6CNA

macOS< 14.614.6CNA

tvOS< 17.617.6CNA

visionOS< 1.31.3CNA

watchOS< 10.610.6CNA

safari< 17.617.6CISA-ADP

ios< 17.617.6CISA-ADP

ipad_os< 17.617.6CISA-ADP

ios< 16.716.7CISA-ADP

ipad_os< 16.716.7CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References