CVE-2024-44309
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
CVSS
—
Sem CVSS
EPSS
21.9%
p98
KEV
SIM
21 de nov. de 2024
Exploit Today
79
0-100
Publicado: — · Última mod.: —
Produto
Apple / Multiple Products
Vulnerabilidade
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
Adicionado ao KEV
21 de nov. de 2024
Corrigir até
12 de dez. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://support.apple.com/en-us/121752, https://support.apple.com/en-us/121753, https://support.apple.com/en-us/121754, https://support.apple.com/en-us/121755, https://support.apple.com/en-us/121756 ; https://nvd.nist.gov/vuln/detail/CVE-2024-44309