The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.
CVE-2024-27820
CVSS base score
8.8 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-119
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
apple safari
apple ipados
apple iphone os
apple macos
apple tvos
apple visionos
apple watchos
References
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- seclists.org Mailing List, Third Party Advisory
- support.apple.com Vendor Advisory
- support.apple.com Vendor Advisory