CVE-2024-40867 is a critical vulnerability in iOS and iPadOS involving a custom URL scheme handling flaw. The issue allows a remote attacker to potentially break out of the Web Content sandbox due to insufficient input validation. This vulnerability is fixed in iOS 18.1 and iPadOS 18.1.