The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfiltrate audio data cross-origin.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-webkitgtk4amazon-linux-ami-2-upgrade-webkitgtk4-debuginfoamazon-linux-ami-2-upgrade-webkitgtk4-develamazon-linux-ami-2-upgrade-webkitgtk4-jscamazon-linux-ami-2-upgrade-webkitgtk4-jsc-devel | May 30, 2025 | Mar 8, 2024 | |
| Apple Osx Webkit | apple-osx-upgrade-latest | Jun 25, 2026 | Jun 25, 2026 | |
| Apple Safari | apple-safari-upgrade-17_4apple-safari-windows-uninstall | Mar 8, 2024 | Mar 8, 2024 | |
| Debian | debian-upgrade-webkit2gtk | May 13, 2024 | Mar 8, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-webkit-gtk | Jul 9, 2024 | Mar 8, 2024 | |
| Redhat_linux | redhat-upgrade-webkit2gtk3redhat-upgrade-webkit2gtk3-debuginforedhat-upgrade-webkit2gtk3-debugsourceredhat-upgrade-webkit2gtk3-develredhat-upgrade-webkit2gtk3-devel-debuginforedhat-upgrade-webkit2gtk3-jscredhat-upgrade-webkit2gtk3-jsc-debuginforedhat-upgrade-webkit2gtk3-jsc-develredhat-upgrade-webkit2gtk3-jsc-devel-debuginforedhat-upgrade-webkitgtk4redhat-upgrade-webkitgtk4-debuginforedhat-upgrade-webkitgtk4-develredhat-upgrade-webkitgtk4-docredhat-upgrade-webkitgtk4-jscredhat-upgrade-webkitgtk4-jsc-devel | Jul 9, 2025 | Mar 8, 2024 | |
| Suse | — | suse-upgrade-libjavascriptcoregtk-4_0-18suse-upgrade-libjavascriptcoregtk-4_0-18-32bitsuse-upgrade-libjavascriptcoregtk-4_1-0suse-upgrade-libjavascriptcoregtk-4_1-0-32bitsuse-upgrade-libjavascriptcoregtk-6_0-1suse-upgrade-libwebkit2gtk-4_0-37suse-upgrade-libwebkit2gtk-4_0-37-32bitsuse-upgrade-libwebkit2gtk-4_1-0suse-upgrade-libwebkit2gtk-4_1-0-32bitsuse-upgrade-libwebkit2gtk3-langsuse-upgrade-libwebkitgtk-6_0-4suse-upgrade-typelib-1_0-javascriptcore-4_0suse-upgrade-typelib-1_0-javascriptcore-4_1suse-upgrade-typelib-1_0-javascriptcore-6_0suse-upgrade-typelib-1_0-webkit-6_0suse-upgrade-typelib-1_0-webkit2-4_0suse-upgrade-typelib-1_0-webkit2-4_1suse-upgrade-typelib-1_0-webkit2webextension-4_0suse-upgrade-typelib-1_0-webkit2webextension-4_1suse-upgrade-typelib-1_0-webkitwebprocessextension-6_0suse-upgrade-webkit-jsc-4suse-upgrade-webkit-jsc-4-1suse-upgrade-webkit-jsc-6-0suse-upgrade-webkit2gtk-4_0-injected-bundlessuse-upgrade-webkit2gtk-4_1-injected-bundlessuse-upgrade-webkit2gtk3-develsuse-upgrade-webkit2gtk3-minibrowsersuse-upgrade-webkit2gtk3-soup2-develsuse-upgrade-webkit2gtk3-soup2-minibrowsersuse-upgrade-webkit2gtk4-develsuse-upgrade-webkit2gtk4-minibrowsersuse-upgrade-webkitgtk-4-0-langsuse-upgrade-webkitgtk-4-1-langsuse-upgrade-webkitgtk-6-0-langsuse-upgrade-webkitgtk-6_0-injected-bundles | Apr 15, 2024 | Mar 8, 2024 |
| Ubuntu | ubuntu-upgrade-libjavascriptcoregtk-4-0-18ubuntu-upgrade-libjavascriptcoregtk-4-1-0ubuntu-upgrade-libjavascriptcoregtk-6-0-1ubuntu-upgrade-libwebkit2gtk-4-0-37ubuntu-upgrade-libwebkit2gtk-4-1-0ubuntu-upgrade-libwebkitgtk-6-0-4 | Apr 16, 2024 | Mar 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub