Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-23254 Details

Description

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfiltrate audio data cross-origin.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CNA: CISA-ADPCVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://seclists.org/fulldisclosure/2024/Mar/20 CVEMailing List
http://seclists.org/fulldisclosure/2024/Mar/21 CVEMailing List
http://seclists.org/fulldisclosure/2024/Mar/24 CVEMailing List
http://seclists.org/fulldisclosure/2024/Mar/25 CVEMailing List
http://seclists.org/fulldisclosure/2024/Mar/26 CVEMailing List

see all 23 references

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]

Affected Products

ProductVersions

Change History

14 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-23254
NVD Published Date:
Mar 8, 2024
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2024-23254 Details - Not Deferred