Description
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. Maliciously crafted web content may violate iframe sandboxing policy.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | Safari | < 18 | 18 |
| Apple | iOS and iPadOS | < 17.7.1, < 18 | 17.7.1 |
| Apple | macOS | < 15 | 15 |
| Apple | watchOS | < 11 | 11 |
Advisories 4
- WID-SEC-2024-2154 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 11, 2025
- NCSC-2024-0457 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Nov 20, 2024
- NCSC-2024-0428 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Oct 30, 2024
- WID-SEC-2024-2155 Apple Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 28, 2024