Description
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 18.1.1 |
| Apple | iOS and iPadOS | < 17.7.2; < 18.1.1 |
| Apple | macOS | < 15.1.1 |
| Apple | visionOS | < 2.1.1 |
| apple | safari | < 18.1 |
| apple | macos | < 15.1 |
| apple | visionos | < 2.1 |
| apple | iphone_os | < 17.7; >= 18.0, < 18.1 |
| apple | iphone_os | < 17.7; >= 18.0, < 18.1 |
| apple | ipad_os | < 17.7; >= 18.0, < 18.1 |
| apple | ipad_os | < 17.7; >= 18.0, < 18.1 |
References
- https://support.apple.com/en-us/121752Vendor Advisory
- https://support.apple.com/en-us/121753Vendor Advisory
- https://support.apple.com/en-us/121754Vendor Advisory
- https://support.apple.com/en-us/121755Vendor Advisory
- https://support.apple.com/en-us/121756Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Nov/16Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/12/msg00003.htmlMailing List
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-44308US Government Resource
Timeline
- Published
- Nov 20, 2024
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Nov 21, 2024
- NVD status
- Analyzed