CVE-2024-27850
No fix known EPSS <1%CVSS 6.5
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. A maliciously crafted webpage may be able to fingerprint the user.
Products: apple safari, Apple iOS and iPadOS, Apple macOS, Apple visionOS, apple iphone_os, apple ipad_os
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| Ubuntu 18.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 18.04 LTS | qtwebkit-source | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | no fix |
| Ubuntu 18.04 LTS | webkitgtk | no fix |
| Ubuntu 20.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 20.04 LTS | webkit2gtk | no fix |
| Ubuntu 20.04 LTS | wpewebkit | no fix |
| Ubuntu 22.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 22.04 LTS | wpewebkit | no fix |
| Ubuntu 24.04 LTS | qtwebkit-opensource-src | no fix |