This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Safari | Apple | * | 18.1 (excluding) |
| Ipados | Apple | * | 17.7.1 (excluding) |
| Ipados | Apple | 18.0 (including) | 18.1 (excluding) |
| Iphone_os | Apple | * | 17.7.1 (excluding) |
| Iphone_os | Apple | 18.0 (including) | 18.1 (excluding) |
| Macos | Apple | 15.0 (including) | 15.1 (excluding) |
| Visionos | Apple | * | 2.1 (excluding) |
References
- https://support.apple.com/en-us/121563
- https://support.apple.com/en-us/121564
- https://support.apple.com/en-us/121566
- https://support.apple.com/en-us/121567
- https://support.apple.com/en-us/121571
- http://seclists.org/fulldisclosure/2024/Oct/10
- http://seclists.org/fulldisclosure/2024/Oct/11
- http://seclists.org/fulldisclosure/2024/Oct/19
- http://seclists.org/fulldisclosure/2024/Oct/9