The issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, Safari 17.4. A malicious website may exfiltrate audio data cross-origin.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 6.5 | Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| Product | Vendor | Version |
|---|---|---|
| visionOS | Apple | n/a |
| tvOS | Apple | < 6.1.7601.25632 |
| iOS and iPadOS | Apple | n/a |
| Safari | Apple | n/a |
| macOS | Apple | PE prior to 2016.4.5 or 2017.2.1 |
| watchOS | Apple | 5.0.2 |