Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-44308

Опубликовано: 20 нояб. 2024
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Версия до 18.1.1 (исключая)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия до 17.7.2 (исключая)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия от 18.0 (включая) до 18.1.1 (исключая)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия до 17.7.2 (исключая)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия от 18.0 (включая) до 18.1.1 (исключая)
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Версия до 15.1.1 (исключая)
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Версия до 2.1.1 (исключая)

EPSS

Процентиль: 76%
0.00935
Низкий

8.8 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 1 года назад

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

CVSS3: 8.8
redhat
около 1 года назад

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

CVSS3: 8.8
debian
около 1 года назад

The issue was addressed with improved checks. This issue is fixed in S ...

CVSS3: 8.8
github
около 1 года назад

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

CVSS3: 8.8
fstec
около 1 года назад

Уязвимость браузера Safari операционных систем iOS, iPadOS, visionOS, Mac OS, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 76%
0.00935
Низкий

8.8 High

CVSS3

Дефекты

NVD-CWE-noinfo