返回 CVE 浏览器

CVE-2024-44309

🔥 Known Exploited (CISA KEV)MEDIUM

6.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-11-20

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

Affected Platforms (CPE)

💻

Debian

Debian Linux

= 11.0

📦

Apple

Safari

< 18.1.1

💻

Apple

Ipados

< 17.7.2>= 18.0 and < 18.1.1

💻

Apple

Iphone Os

< 17.7.2>= 18.0 and < 18.1.1

References & Advisories

🔗 https://support.apple.com/en-us/121752

🔗 https://support.apple.com/en-us/121753

🔗 https://support.apple.com/en-us/121754

🔗 https://support.apple.com/en-us/121755

🔗 https://support.apple.com/en-us/121756

🔗 http://seclists.org/fulldisclosure/2024/Nov/16

🔗 https://lists.debian.org/debian-lts-announce/2024/12/msg00003.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-44309

相关漏洞威胁

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop ...

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kuma...

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in diges...

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_...