CVE-2024-54508

EPSS 1.1%
Veröffentlicht 12.12.2024 02:15:31
Zuletzt bearbeitet 16.12.2024 19:15:09
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version < 18.2

Apple ≫ iPadOS Version < 18.2

Apple ≫ iPhone OS Version < 18.2

Apple ≫ macOS Version < 15.2

Apple ≫ tvOS Version < 18.2

Apple ≫ visionOS Version < 2.2

Apple ≫ watchOS Version < 11.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.1%	0.773

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

https://support.apple.com/en-us/121839

Vendor Advisory

https://support.apple.com/en-us/121837

Vendor Advisory

https://support.apple.com/en-us/121843

Vendor Advisory

https://support.apple.com/en-us/121844

Vendor Advisory

https://support.apple.com/en-us/121845

Vendor Advisory

https://support.apple.com/en-us/121846

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-54508

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-54508

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-54508

EUVD