{"id":"CVE-2024-23263","details":"A logic issue was addressed with improved validation. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, Safari 17.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.","modified":"2026-04-16T04:35:25.953328117Z","published":"2024-03-08T02:15:48.980Z","related":["SUSE-SU-2024:1269-1","SUSE-SU-2024:1270-1","SUSE-SU-2024:1293-1","SUSE-SU-2024:1944-1","SUSE-SU-2024:1976-1"],"references":[{"type":"WEB","url":"https://support.apple.com/kb/HT214089"},{"type":"WEB","url":"https://support.apple.com/kb/HT214084"},{"type":"WEB","url":"https://support.apple.com/kb/HT214081"},{"type":"WEB","url":"https://support.apple.com/kb/HT214082"},{"type":"WEB","url":"https://support.apple.com/kb/HT214087"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/HT214087"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/HT214089"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/HT214082"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/HT214081"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/HT214084"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/HT214086"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/HT214088"},{"type":"ARTICLE","url":"http://seclists.org/fulldisclosure/2024/Mar/26"},{"type":"ARTICLE","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAIPBVDQV3GHMSNSZNEJCRZEPM7BEYGF/"},{"type":"ARTICLE","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXORDRCSQAQU436W4S2Z3X5B5PDXL3LI/"},{"type":"ARTICLE","url":"http://seclists.org/fulldisclosure/2024/Mar/20"},{"type":"ARTICLE","url":"http://seclists.org/fulldisclosure/2024/Mar/21"},{"type":"ARTICLE","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/"},{"type":"ARTICLE","url":"http://seclists.org/fulldisclosure/2024/Mar/25"},{"type":"ARTICLE","url":"http://www.openwall.com/lists/oss-security/2024/03/26/1"},{"type":"ARTICLE","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AO4BNNL5X2LQBJ6WX7VT4SGMA6R7DUU5/"},{"type":"ARTICLE","url":"http://seclists.org/fulldisclosure/2024/Mar/24"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23263.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"17.4"}]},{"events":[{"introduced":"0"},{"fixed":"16.7.6"}]},{"events":[{"introduced":"17.0"},{"fixed":"17.4"}]},{"events":[{"introduced":"0"},{"fixed":"16.7.6"}]},{"events":[{"introduced":"17.0"},{"fixed":"17.4"}]},{"events":[{"introduced":"14.0"},{"fixed":"14.4"}]},{"events":[{"introduced":"0"},{"fixed":"17.4"}]},{"events":[{"introduced":"0"},{"fixed":"1.1"}]},{"events":[{"introduced":"0"},{"fixed":"10.4"}]},{"events":[{"introduced":"0"},{"fixed":"2.44.0"}]},{"events":[{"introduced":"0"},{"fixed":"2.44.0"}]},{"events":[{"introduced":"0"},{"last_affected":"38"}]},{"events":[{"introduced":"0"},{"last_affected":"39"}]},{"events":[{"introduced":"0"},{"last_affected":"40"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"}]}