Description
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | iOS and iPadOS | < 18.1 | 18.1 |
Advisories 2
- WID-SEC-2024-3288 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 19, 2024
- NCSC-2024-0428 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Oct 30, 2024