VULNERABILITY INTELLIGENCE

CVE-2024-23254

CVSS score6.5 MEDIUM

EPSS probability1.25%

CISA KEVNot currently listed

Published2024-03-08

Last modified2026-06-17

Description

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfiltrate audio data cross-origin.