Search for vulnerabilities
Vulnerability details: VCID-p229-ayyv-b3cm
Vulnerability ID VCID-p229-ayyv-b3cm
Aliases CVE-2024-40857
Summary This issue was addressed through improved state management. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content may lead to universal cross site scripting.
Status Published
Exploitability 0.5
Weighted Severity 6.4
Risk 3.2
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
System Score Found at
cvssv3 7.1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40857.json
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00059 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00086 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00096 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00096 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00096 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00145 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00161 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00161 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00161 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00168 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-40857
cvssv3 6.1 https://nvd.nist.gov/vuln/detail/CVE-2024-40857
cvssv3.1 6.1 https://nvd.nist.gov/vuln/detail/CVE-2024-40857
cvssv3.1 6.1 https://support.apple.com/en-us/121238
cvssv3.1 6.1 https://support.apple.com/en-us/121238
ssvc Track https://support.apple.com/en-us/121238
ssvc Track https://support.apple.com/en-us/121238
cvssv3.1 6.1 https://support.apple.com/en-us/121240
cvssv3.1 6.1 https://support.apple.com/en-us/121240
ssvc Track https://support.apple.com/en-us/121240
ssvc Track https://support.apple.com/en-us/121240
cvssv3.1 6.1 https://support.apple.com/en-us/121241
ssvc Track https://support.apple.com/en-us/121241
cvssv3.1 6.1 https://support.apple.com/en-us/121248
cvssv3.1 6.1 https://support.apple.com/en-us/121248
ssvc Track https://support.apple.com/en-us/121248
ssvc Track https://support.apple.com/en-us/121248
cvssv3.1 6.1 https://support.apple.com/en-us/121249
cvssv3.1 6.1 https://support.apple.com/en-us/121249
ssvc Track https://support.apple.com/en-us/121249
ssvc Track https://support.apple.com/en-us/121249
cvssv3.1 6.1 https://support.apple.com/en-us/121250
cvssv3.1 6.1 https://support.apple.com/en-us/121250
ssvc Track https://support.apple.com/en-us/121250
ssvc Track https://support.apple.com/en-us/121250
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40857.json
https://api.first.org/data/v1/epss?cve=CVE-2024-40857
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40857
https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121240
https://support.apple.com/en-us/121241
https://support.apple.com/en-us/121248
https://support.apple.com/en-us/121249
https://support.apple.com/en-us/121250
2314705 https://bugzilla.redhat.com/show_bug.cgi?id=2314705
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
CVE-2024-40857 https://nvd.nist.gov/vuln/detail/CVE-2024-40857
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-40857.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-40857
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-40857
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121238
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121238
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121238
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121238
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121240
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121240
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121240
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121240
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121241
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121241
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121248
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121248
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121248
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121248
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121249
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121249
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121249
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121249
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121250
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://support.apple.com/en-us/121250
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121250
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T15:11:25Z/ Found at https://support.apple.com/en-us/121250
Exploit Prediction Scoring System (EPSS)
Percentile 0.26358
EPSS Score 0.00059
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
2024-09-17T19:10:25.183755+00:00 NVD Importer Import https://nvd.nist.gov/vuln/detail/CVE-2024-40857 34.0.1