CVE-2024-40867

No fix known EPSS <1%CVSS 8.8

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.

Published 2024-10-28 · CVE record · OSV

Products: Apple iOS and iPadOS, Apple iOS, apple ipados