VulnSocial

CVE-2024-44309(apple / debian_linux)

LOWCVSS 6.3 · MEDIUMCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

apple CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-12-12. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • ipados
  • iphone_os
  • macos

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
appledebian
Products
debian_linuxipadosiphone_osmacossafarivisionos

1 version affected across 6 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-25: 110-25
Full discourse1 post
  • ウグイス宿@ashinowoto

    まずios18のSafari限定の脆弱性を調べさせて、種類ごとにわけるやろ…？ メモリ破壊・RCE系 【メモリ管理・領域逸脱系】 1-1、バッファオーバーフロー 1-1-1、CVE-2025-14174 [CVSS: 8.8 (High)] 1-1-2、CVE-2025-24154 [CVSS: 8.8 (High)] 1-1-3、CVE-2025-43300 [CVSS: 9.8 (Critical)] 1-2、Use-After-Free 1-2-1、CVE-2025-24158 [CVSS: 8.8 (High)] 1-2-2、CVE-2025-24189 [CVSS: 8.8 (High)] 1-2-3、CVE-2025-31278 [CVSS: 8.8 (High)] 1-2-4、CVE-2025-43529 [CVSS: 9.8 (Critical)] 【スクリプト実行エンジン・コンパイラ系】 2-1、JavaScriptCore JITコンパイラ最適化不備（JIT / DFG） 2-1-1、CVE-2024-44308 [CVSS: 8.8 (High)] 2-1-2、CVE-2024-54505 [CVSS: 8.8 (High)] 2-1-3、CVE-2024-54543 [CVSS: 8.8 (High)] 2-1-4、CVE-2025-24128 [CVSS: 8.8 (High)] 2-1-5、CVE-2025-3312 [CVSS: 8.8 (High)] 2-2、型混同・オブジェクト状態管理不備（Type Confusion / State） 2-2-1、CVE-2025-24201 [CVSS: 8.8 (High)] 2-2-2、CVE-2025-31273 [CVSS: 8.8 (High)] 2-2-3、CVE-2025-31277 [CVSS: 8.8 (High)] 2-2-4、CVE-2025-43212 [CVSS: 8.8 (High)] 2-2-5、CVE-2025-43213 [CVSS: 8.8 (High)] 【クロスサイト・データ漏洩型（Cross-Origin / Information Disclosure）】 1、スクリプト実行・状態管理系 1-1、ステート・クッキー処理不備によるスクリプト実行（XSS） 1-1-1、CVE-2024-44309 [CVSS: 8.8 (High)] 2、データ保護隔離系 2-1、オリジン隔離の追跡不備によるデータ奪取（Cross-Origin Exfiltration） 2-1-1、CVE-2024-54467 [CVSS: 8.8 (High)] 【セキュリティ制限バイパス型（Policy / Sandbox Bypass）】 1、コンテンツアクセス制御系 1-1、Content Security Policy（CSP）制限回避 1-1-1、CVE-2024-44296 [CVSS: 8.8 (High)] 2、ブラウザプロセス制御系 2-1、レンダラー・プロセス間制御バイパス 2-1-1、CVE-2024-54479 [CVSS: 8.5 (High)]

    000612.3K
    76.1K followersView on X
CPE platform detail6 entries

6 of 6 entries

PartVendorProductVersionTarget SWTarget HW
OSappleipados---
OSappleiphone_os---
OSapplemacos---
Appapplesafari---
OSapplevisionos---
OSdebiandebian_linux11.0--

Explore more

Back to dashboardapple CVEsdebian CVEsdebian_linux vulnerabilities