CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-11-20
Apple WebKit Cookie Management Vulnerability Leading to Cross-Site Scripting (XSS) and Active Exploitation (CVE-2024-44309, CISA KEV)
[Affected Scope] Systems running macOS Sequoia prior to 15.1.1, iOS/iPadOS prior to 18.1.1 and 17.7.2, and Safari prior to 18.1.1
[Impact] Processing maliciously crafted web content can trigger a Cross-Site Scripting (XSS) attack due to state management flaws, with active exploitation reported on Intel-based Mac systems
[Mitigation] Immediately apply the official software updates provided by Apple for macOS, iOS, iPadOS, and Safari