PT-2025-10619 · Apple+9 · Visionos+16
Narendra Bhati
·
Published
2024-09-16
·
Updated
2025-11-25
·
CVE-2024-54467
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
watchOS versions prior to 11
macOS Sequoia versions prior to 15
Safari versions prior to 18
visionOS versions prior to 2
iOS versions prior to 18
iPadOS versions prior to 18
tvOS versions prior to 18
Description
A cookie management issue was addressed with improved state management. A malicious website may exfiltrate data cross-origin.
Recommendations
For watchOS versions prior to 11, update to watchOS 11 to resolve the issue.
For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 to resolve the issue.
For Safari versions prior to 18, update to Safari 18 to resolve the issue.
For visionOS versions prior to 2, update to visionOS 2 to resolve the issue.
For iOS versions prior to 18, update to iOS 18 to resolve the issue.
For iPadOS versions prior to 18, update to iPadOS 18 to resolve the issue.
For tvOS versions prior to 18, update to tvOS 18 to resolve the issue.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Ios
Ipados
Macos Sequoia
Tvos
Visionos
Watchos