PT-2024-8646 · Apple+5 · Ipados+10

Benoît Sevens + 1 · Published 2024-11-19 · Updated 2025-11-25 · CVE-2024-44308

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Safari versions prior to 18.1.1 iOS versions prior to 17.7.2 and 18.1.1 iPadOS versions prior to 17.7.2 and 18.1.1 macOS Sequoia versions prior to 15.1.1 visionOS versions prior to 2.1.1

Description The issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

Recommendations For Safari versions prior to 18.1.1, update to Safari 18.1.1. For iOS versions prior to 17.7.2 and 18.1.1, update to iOS 17.7.2 or 18.1.1. For iPadOS versions prior to 17.7.2 and 18.1.1, update to iPadOS 17.7.2 or 18.1.1. For macOS Sequoia versions prior to 15.1.1, update to macOS Sequoia 15.1.1. For visionOS versions prior to 2.1.1, update to visionOS 2.1.1.

Fix

XSS

RCE

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

BDU:2024-10238

CVE-2024-44308

DLA-3982-1

DSA-5823-1

MGASA-2025-0313

OPENSUSE-SU-2024_4117-1

OPENSUSE-SU-2024_4292-1

OPENSUSE-SU-2025_0043-1

OPENSUSE-SU-2025_0096-1

RHSA-2025:10364

SUSE-SU-2024:4117-1

SUSE-SU-2024:4167-1

SUSE-SU-2024:4292-1

SUSE-SU-2024:4293-1

SUSE-SU-2024_4117-1

SUSE-SU-2024_4167-1

SUSE-SU-2024_4292-1

SUSE-SU-2024_4293-1

SUSE-SU-2025:0043-1

SUSE-SU-2025:0096-1

SUSE-SU-2025:0104-1

SUSE-SU-2025_0043-1

SUSE-SU-2025_0096-1

SUSE-SU-2025_0104-1

USN-7142-1

Affected Products

Astra Linux

Debian

Javascriptcore

Linuxmint

Apple Macos

Safari

Suse

Ubuntu

Ios

Ipados

Visionos

References · 176

• https://advisories.mageia.org/MGASA-2025-0313.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-44308 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10238 · Security Note
• https://ubuntu.com/security/notices/USN-7142-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5823-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-44308 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3982-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44308 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:0096-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7142-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4292-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-44308 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4117-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0043-1 · Vendor Advisory