webpage handler information disclosure (CVE-2024-27850) #shorts #breaking

CVE

CVE-2024-27850 is a vulnerability known as webpage handler information disclosure, discovered 4 months ago. Although it is not a zero-day vulnerability, meaning it was identified before any attacks were reported, it currently has no known exploit. This issue affects Apple iOS, iPadOS, macOS, visionOS, and the Safari web browser. This vulnerability enables hackers to fingerprint users, potentially leading them to collect information unique to the user's device or browser. However, to date, there have been no reported attacks exploiting this specific vulnerability.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://support.apple.com/en-us/HT214101
• https://support.apple.com/en-us/HT214106
• https://support.apple.com/en-us/HT214108
• https://support.apple.com/en-us/HT214103
• http://seclists.org/fulldisclosure/2024/Jun/5