VulnSocial

CVE-2024-44308(apple / debian_linux)

LOWCVSS 8.8 · HIGHCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

apple CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-12-12. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vendor / third-party advisories
Other references

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • ipados
  • iphone_os
  • macos

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
appledebian
Products
debian_linuxipadosiphone_osmacossafarivisionos

1 version affected across 6 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-30: 109-30
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc

    TRC analysis shows attackers exploited CVE-2024-44308, an out-of-bounds write vulnerability in Apple's CoreGraphics framework, to achieve arbitrary code execution on targeted iOS and macOS devices. The sophisticated campaign targeted specific high-value individuals through malicious content processing. Runtime segmentation could help contain post-compromise activity across Apple ecosystem devices. #ZeroDay #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/apple-zero-day-cve-2026-86950-targeted-attacks-coregraphics

    0000045
    2.0K followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSappleipados---
OSappleiphone_os---
OSapplemacos---
Appapplesafari---
OSapplevisionos---
OSdebiandebian_linux11.0--

Explore more

Back to dashboardapple CVEsdebian CVEsdebian_linux vulnerabilities