CVE-2024-40817: 
Apple Safari vulnerability analysis and mitigation

A UI spoofing vulnerability (CVE-2024-40817) was discovered affecting Safari and macOS systems. The vulnerability was fixed in macOS Sonoma 14.6, Safari 17.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8, released on July 29, 2024. The issue affects Safari browser and various macOS versions, allowing potential UI spoofing when visiting websites that frame malicious content (Apple Support).

The vulnerability is classified as an improper restriction of rendered UI layers or frames (CWE-1021). It received a CVSS v3.1 base score of 6.1 (MEDIUM) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. The issue was addressed by Apple through improved UI handling in the affected systems (NVD).

When exploited, this vulnerability could allow an attacker to conduct UI spoofing attacks through maliciously crafted web content that frames malicious content. This could potentially lead to user deception and compromise of user interface integrity (Apple Support).

The vulnerability requires user interaction and can be exploited when a user visits a website containing maliciously crafted content. The attack vector is network-based (AV:N) with low attack complexity (AC:L) and no privileges required (PR:N) (NVD).

Apple has released patches to address this vulnerability in multiple versions of their software. Users should update to macOS Sonoma 14.6, Safari 17.6, macOS Monterey 12.7.6, or macOS Ventura 13.6.8 depending on their system. The patches can be obtained through the Mac App Store or Apple's Software Downloads website (Apple Support).

The vulnerability was discovered and reported by Yadhu Krishna M and Narendra Bhati, Manager of Cyber Security At Suma Soft Pvt. Ltd, Pune (India). Apple acknowledged their contribution in the security advisory (Apple Support).