CVEブラウザに戻る

CVE-2024-44308

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-11-20

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

Affected Platforms (CPE)

💻

Debian

Debian Linux

= 11.0

📦

Apple

Safari

< 18.1.1

💻

Apple

Ipados

< 17.7.2>= 18.0 and < 18.1.1

💻

Apple

Iphone Os

< 17.7.2>= 18.0 and < 18.1.1

References & Advisories

🔗 https://support.apple.com/en-us/121752

🔗 https://support.apple.com/en-us/121753

🔗 https://support.apple.com/en-us/121754

🔗 https://support.apple.com/en-us/121755

🔗 https://support.apple.com/en-us/121756

🔗 http://seclists.org/fulldisclosure/2024/Nov/16

🔗 https://lists.debian.org/debian-lts-announce/2024/12/msg00003.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-44308

関連する脆弱性情報

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop ...

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kuma...

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in diges...

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_...