CVE-2024-27850

MEDIUM

Safari < 17.5 - User Fingerprinting via Noise Injection Algorithm

Title source: llm
STIX 2.1

Description

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. A maliciously crafted webpage may be able to fingerprint the user.

References (13)

Core 13

Scores

CVSS v3 6.5
EPSS 0.0066
EPSS Percentile 46.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-359
Status published
Products (9)
Apple/iOS and iPadOS < 17.5
apple/ipados < 17.5
apple/iphone_os < 17.5
Apple/macOS < 14.5
apple/macos 14.0 - 14.5
apple/safari < 17.5
Apple/Safari < 17.5
apple/visionos < 1.2
Apple/visionOS < 1.2
Published Jun 10, 2024
Tracked Since Feb 18, 2026