Search for vulnerabilities
Vulnerability details: VCID-9cq5-u1pj-47ad
Vulnerability ID VCID-9cq5-u1pj-47ad
Aliases CVE-2024-40866
Summary The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing.
Status Published
Exploitability 0.5
Weighted Severity 5.9
Risk 3.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3 6.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40866.json
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00048 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00049 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2024-40866
cvssv3.1 6.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 6.5 https://nvd.nist.gov/vuln/detail/CVE-2024-40866
cvssv3.1 6.5 https://nvd.nist.gov/vuln/detail/CVE-2024-40866
ssvc Track https://support.apple.com/en-us/121238
cvssv3.1 6.5 https://support.apple.com/en-us/121241
ssvc Track https://support.apple.com/en-us/121241
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40866.json
https://api.first.org/data/v1/epss?cve=CVE-2024-40866
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40866
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121241
2312724 https://bugzilla.redhat.com/show_bug.cgi?id=2312724
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
CVE-2024-40866 https://nvd.nist.gov/vuln/detail/CVE-2024-40866
RHSA-2024:8180 https://access.redhat.com/errata/RHSA-2024:8180
RHSA-2024:9553 https://access.redhat.com/errata/RHSA-2024:9553
RHSA-2024:9636 https://access.redhat.com/errata/RHSA-2024:9636
USN-7079-1 https://usn.ubuntu.com/7079-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40866.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-40866
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-40866
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T17:55:34Z/ Found at https://support.apple.com/en-us/121238
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Found at https://support.apple.com/en-us/121241
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T17:55:34Z/ Found at https://support.apple.com/en-us/121241
Exploit Prediction Scoring System (EPSS)
Percentile 0.10965
EPSS Score 0.00046
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2024-09-17T19:10:25.381064+00:00 NVD Importer Import https://nvd.nist.gov/vuln/detail/CVE-2024-40866 34.0.1