by Kastro
Paper/Archive/CVE-2024-54542

CVE-2024-54542

Apple Safari — An authentication issue was addressed with improved state management.

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 53.2.532 × 2010.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS 11.2. Private Browsing tabs may be accessed without authentication.

Affected

ProductAffectedFixed inSource
Safari< 18.218.2CNA
iOS and iPadOS< 18.218.2CNA
macOS< 15.215.2CNA
watchOS< 11.211.2CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refsupport.apple.com/en-us/121837refsupport.apple.com/en-us/121839refsupport.apple.com/en-us/121843refsupport.apple.com/en-us/121846