← Back to browse · API

CVE-2024-44308

Severity
HIGH
CVSS
8.8
EPSS
0.09186
Risk score
63.42
CISA KEV
Yes
PoC
No
Published
2024-11-19
Modified
2026-04-02
First seen
2026-08-07
Aliases
EUVD-2024-41207, GHSA-6WPW-4VR3-6744
Products
Apple:Multiple Products, Apple:Safari 0 <18.1.1, Apple:iOS and iPadOS 0 <17.7.2, Apple:iOS and iPadOS 0 <18.1.1, Apple:macOS 0 <15.1.1, Apple:visionOS 0 <2.1.1
Sources
euvd EUVD-2024-41207
cisa.gov CVE-2024-44308

Description

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

References