CVE-2024-40867

CriticalCVSS 9.6/10Last modified Jun 17, 2026

Description

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.

Metrics

CVSS 3.1 9.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Apple	iOS and iPadOS	< 18.1
apple	ios	< 18.1
apple	ipados	< 18.1

References

https://support.apple.com/en-us/121563Release Notes, Vendor Advisory
http://seclists.org/fulldisclosure/2024/Oct/9

Timeline

Published: Oct 28, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-40875.4The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Back to Top widg CVE-2024-408728.4There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to version 13.07. Attackers CVE-2024-408733.4There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.07. CVE-2024-408755.9There is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.52. Attackers with sys CVE-2024-40884.3The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missi CVE-2024-408838.8Cross-site request forgery vulnerability exists in ELECOM wireless LAN routers. Viewing a malicious page while logging in to the affected pr CVE-2024-408842.7Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to properly enforce permissions which allows a team admin user without "Add Team M CVE-2024-408856.4Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of priv CVE-2024-408868.8Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to sanitize user inputs in the frontend that are u CVE-2024-408876.1Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticat CVE-2024-40897.8A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges.CVE-2024-408908.8**UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B