Description
An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | Safari | < 17.6 | 17.6 |
| Apple | iOS and iPadOS | < 17.6 | 17.6 |
| Apple | macOS | < 14.6 | 14.6 |
| Apple | tvOS | < 17.6 | 17.6 |
| Apple | visionOS | < 1.3 | 1.3 |
| Apple | watchOS | < 10.6 | 10.6 |
Advisories 3
- WID-SEC-2024-1725 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 11, 2026
- WID-SEC-2024-1724 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 24, 2025
- WID-SEC-2024-1726 Apple Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 15, 2024