CVE-2024-44155

A custom URL scheme handling issue was addressed with improved input validation

Medium · published October 28, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. Maliciously crafted web content may violate iframe sandboxing policy.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00558 · 45.7th percentile
Published
2024-10-28T21:08Z
EPSS history
Timeline
  • 28 OCT 21:08Z
    A custom URL scheme handling issue was addressed with improved input validation
    cvelistv5