← Database

CVE-2024-40867

CRITICAL CVSS: 9.6 Published: 2024-10-28 Modified: 2026-06-17

Description

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.

Affected Platforms

Apple Iphone OsApple Ipados

Weakness Type

NVD-CWE-noinfo

References