CVE-2024-44259

EPSS 0.24%
Veröffentlicht 28.10.2024 21:15:07
Zuletzt bearbeitet 11.12.2024 18:29:11
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version < 18.1

Apple ≫ iPadOS Version < 17.7.1

Apple ≫ iPadOS Version >= 18.0 < 18.1

Apple ≫ iPhone OS Version < 17.7.1

Apple ≫ iPhone OS Version >= 18.0 < 18.1

Apple ≫ macOS Version >= 15.0 < 15.1

Apple ≫ visionOS Version < 2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.467

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

https://support.apple.com/en-us/121563

Vendor Advisory

https://support.apple.com/en-us/121567

Vendor Advisory

https://support.apple.com/en-us/121566

Vendor Advisory

https://support.apple.com/en-us/121564

Vendor Advisory

https://support.apple.com/en-us/121571

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-44259

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-44259

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-44259

EUVD