Description
A window management issue was addressed with improved state management. This issue is fixed in Safari 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Visiting a website that frames malicious content may lead to UI spoofing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | iOS and iPadOS | unspecified – < 17 | 17 |
| Apple | Safari | unspecified – < 17 | 17 |
| Apple | macOS | unspecified – < 14 | 14 |
| Apple | watchOS | unspecified – < 10 | 10 |
Advisories 3
- WID-SEC-2023-2454 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 5, 2026
- WID-SEC-2023-2453 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 13, 2025
- WID-SEC-2023-2452 Apple Safari: Mehre Schwachstellen BSI CERT-Bund (WID) · Sep 26, 2023
References
- https://support.apple.com/en-us/HT213938
- https://support.apple.com/en-us/HT213941
- https://support.apple.com/en-us/HT213940
- https://support.apple.com/en-us/HT213937
- http://seclists.org/fulldisclosure/2023/Oct/2
- http://seclists.org/fulldisclosure/2023/Oct/8
- http://seclists.org/fulldisclosure/2023/Oct/9
- http://seclists.org/fulldisclosure/2023/Oct/3