VDB
GHSA-xf4m-339r-jvfr
GHSA-xf4m-339r-jvfr
PUBLISHED
CVSS 6.5 MEDIUM
Record from GitHub Advisory Database · Published June 10, 2024
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the user.
Risk scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Timeline
- Jun 10, 2024 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-xf4m-339r-jvfr
vulnetix vdb fixes GHSA-xf4m-339r-jvfrOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-xf4m-339r-jvfr/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-27850 advisory
- http://seclists.org/fulldisclosure/2024/Jun/5 url
- https://support.apple.com/en-us/120896 advisory
- https://support.apple.com/kb/HT214103 advisory
- https://support.apple.com/en-us/120903 advisory
- https://support.apple.com/en-us/120906 advisory
- https://support.apple.com/en-us/HT214101 advisory
- https://support.apple.com/en-us/HT214103 advisory
- https://support.apple.com/en-us/HT214106 advisory
- https://support.apple.com/kb/HT214101 advisory
- https://support.apple.com/kb/HT214106 advisory
- https://support.apple.com/en-us/120905 advisory
- https://support.apple.com/en-us/HT214108 advisory
- https://support.apple.com/kb/HT214108 advisory