Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-44244 (GCVE-0-2024-44244)
Vulnerability from cvelistv5 – Published: 2024-10-28 21:08 – Updated: 2026-04-02 18:16- Processing maliciously crafted web content may lead to an unexpected process crash
- CWE-787 - Out-of-bounds Write
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-44244",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-30T19:39:31.901741Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-06T14:39:33.635Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-03T22:09:35.268Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00019.html"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Oct/19"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Oct/15"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Oct/11"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Oct/9"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Safari",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "2.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "11.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing maliciously crafted web content may lead to an unexpected process crash."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing maliciously crafted web content may lead to an unexpected process crash",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-02T18:16:55.139Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/121563"
},
{
"url": "https://support.apple.com/en-us/121564"
},
{
"url": "https://support.apple.com/en-us/121565"
},
{
"url": "https://support.apple.com/en-us/121566"
},
{
"url": "https://support.apple.com/en-us/121569"
},
{
"url": "https://support.apple.com/en-us/121571"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2024-44244",
"datePublished": "2024-10-28T21:08:08.850Z",
"dateReserved": "2024-08-20T21:45:40.785Z",
"dateUpdated": "2026-04-02T18:16:55.139Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2024-44244",
"date": "2026-07-20",
"epss": "0.0095",
"percentile": "0.57367"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"18.1\", \"matchCriteriaId\": \"1F64554D-9F90-4871-9A0B-FB28BD52F4B3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"18.1\", \"matchCriteriaId\": \"B9A26654-0DDB-4D4D-BB1E-C65C3339148E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"15.1\", \"matchCriteriaId\": \"1D298E1D-DD23-4D35-9DE4-E3F5999F97AA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"18.1\", \"matchCriteriaId\": \"8B754D7C-3FF7-4275-9C5B-4DCECFACD491\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"18.1\", \"matchCriteriaId\": \"5D57FCAE-9B33-4532-BC69-BC3D35719EDB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.1\", \"matchCriteriaId\": \"15E4723D-CD2B-4486-A69C-27F843844A80\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"11.1\", \"matchCriteriaId\": \"5DB9A303-7D3D-4167-9F28-64AA4B1EC0E1\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1, visionOS 2.1, tvOS 18.1, macOS Sequoia 15.1, Safari 18.1. Processing maliciously crafted web content may lead to an unexpected process crash.\"}, {\"lang\": \"es\", \"value\": \"Se solucion\\u00f3 un problema de corrupci\\u00f3n de memoria con una validaci\\u00f3n de entrada mejorada. Este problema se solucion\\u00f3 en iOS 18.1 y iPadOS 18.1, watchOS 11.1, visionOS 2.1 y tvOS 18.1. El procesamiento de contenido web manipulado con fines malintencionados puede provocar un bloqueo inesperado del proceso.\"}]",
"id": "CVE-2024-44244",
"lastModified": "2024-12-06T15:15:08.857",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 1.4}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 1.4}]}",
"published": "2024-10-28T21:15:06.637",
"references": "[{\"url\": \"https://support.apple.com/en-us/121563\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121564\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121565\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121566\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121569\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/121571\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "product-security@apple.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-44244\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2024-10-28T21:15:06.637\",\"lastModified\":\"2026-06-17T07:52:37.063\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing maliciously crafted web content may lead to an unexpected process crash.\"},{\"lang\":\"es\",\"value\":\"Se solucion\u00f3 un problema de corrupci\u00f3n de memoria con una validaci\u00f3n de entrada mejorada. Este problema se solucion\u00f3 en iOS 18.1 y iPadOS 18.1, watchOS 11.1, visionOS 2.1 y tvOS 18.1. El procesamiento de contenido web manipulado con fines malintencionados puede provocar un bloqueo inesperado del proceso.\"}],\"affected\":[{\"source\":\"product-security@apple.com\",\"affectedData\":[{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"15.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"tvOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"visionOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"2.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"11.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-10-30T19:39:31.901741Z\",\"id\":\"CVE-2024-44244\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.1\",\"matchCriteriaId\":\"1F64554D-9F90-4871-9A0B-FB28BD52F4B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.1\",\"matchCriteriaId\":\"B9A26654-0DDB-4D4D-BB1E-C65C3339148E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"15.1\",\"matchCriteriaId\":\"1D298E1D-DD23-4D35-9DE4-E3F5999F97AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.1\",\"matchCriteriaId\":\"8B754D7C-3FF7-4275-9C5B-4DCECFACD491\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.1\",\"matchCriteriaId\":\"5D57FCAE-9B33-4532-BC69-BC3D35719EDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.1\",\"matchCriteriaId\":\"15E4723D-CD2B-4486-A69C-27F843844A80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.1\",\"matchCriteriaId\":\"5DB9A303-7D3D-4167-9F28-64AA4B1EC0E1\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/121563\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121564\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121565\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121566\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121569\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/121571\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Oct/11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2024/Oct/15\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2024/Oct/19\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2024/Oct/9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/11/msg00019.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2025-11-21T14:24:25+00:00",
"cve": "CVE-2024-44244",
"id": "CVE-2024-44244",
"initial_release_date": "2024-01-31T00:00:00+00:00",
"product_status:fixed": "469",
"product_status:known_affected": "5",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-44244.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2024/11/msg00019.html\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Oct/19\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Oct/15\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Oct/11\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Oct/9\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:09:35.268Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-44244\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-30T19:39:31.901741Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-30T19:39:38.380Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"2.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"11.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"15.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"Safari\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.1\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/121566\"}, {\"url\": \"https://support.apple.com/en-us/121569\"}, {\"url\": \"https://support.apple.com/en-us/121565\"}, {\"url\": \"https://support.apple.com/en-us/121563\"}, {\"url\": \"https://support.apple.com/en-us/121564\"}, {\"url\": \"https://support.apple.com/en-us/121571\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1, visionOS 2.1, tvOS 18.1, macOS Sequoia 15.1, Safari 18.1. Processing maliciously crafted web content may lead to an unexpected process crash.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Processing maliciously crafted web content may lead to an unexpected process crash\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2024-10-29T22:50:37.232Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-44244\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-03T22:09:35.268Z\", \"dateReserved\": \"2024-08-20T21:45:40.785Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2024-10-28T21:08:08.850Z\", \"assignerShortName\": \"apple\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
WID-SEC-W-2024-3291
Vulnerability from csaf_certbund - Published: 2024-10-28 23:00 - Updated: 2026-04-06 22:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple macOS Sonoma <14.7.1
Apple / macOS
|
Sonoma <14.7.1 | ||
|
Apple macOS Sequoia <15.1
Apple / macOS
|
Sequoia <15.1 | ||
|
Apple macOS Ventura <13.7.1
Apple / macOS
|
Ventura <13.7.1 |
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- MacOS X",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-3291 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3291.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-3291 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3291"
},
{
"category": "external",
"summary": "Apple Security Advisory vom 2024-10-28",
"url": "https://lists.apple.com/archives/security-announce/2024/Oct/msg00003.html"
},
{
"category": "external",
"summary": "Apple Security Advisory vom 2024-10-28",
"url": "https://lists.apple.com/archives/security-announce/2024/Oct/msg00004.html"
},
{
"category": "external",
"summary": "Apple Security Advisory vom 2024-10-28",
"url": "https://lists.apple.com/archives/security-announce/2024/Oct/msg00005.html"
}
],
"source_lang": "en-US",
"title": "Apple macOS: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-04-06T22:00:00.000+00:00",
"generator": {
"date": "2026-04-07T10:14:47.439+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2024-3291",
"initial_release_date": "2024-10-28T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-10-28T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-11-19T23:00:00.000+00:00",
"number": "2",
"summary": "CVE Nummern erg\u00e4nzt"
},
{
"date": "2024-12-11T23:00:00.000+00:00",
"number": "3",
"summary": "CVE Nummern erg\u00e4nzt"
},
{
"date": "2024-12-19T23:00:00.000+00:00",
"number": "4",
"summary": "CVE-2024-54538 erg\u00e4nzt"
},
{
"date": "2025-08-28T22:00:00.000+00:00",
"number": "5",
"summary": "CVE-2024-54554 erg\u00e4nzt"
},
{
"date": "2025-08-31T22:00:00.000+00:00",
"number": "6",
"summary": "Referenz(en) aufgenommen: EUVD-2024-54932"
},
{
"date": "2025-09-15T22:00:00.000+00:00",
"number": "7",
"summary": "CVE Nummern erg\u00e4nzt"
},
{
"date": "2026-04-06T22:00:00.000+00:00",
"number": "8",
"summary": "Referenz(en) aufgenommen: EUVD-2024-55521, EUVD-2024-55530, EUVD-2024-55523, EUVD-2024-55529, EUVD-2024-55525, EUVD-2024-55528"
}
],
"status": "final",
"version": "8"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Sequoia \u003c15.1",
"product": {
"name": "Apple macOS Sequoia \u003c15.1",
"product_id": "T038638"
}
},
{
"category": "product_version",
"name": "Sequoia 15.1",
"product": {
"name": "Apple macOS Sequoia 15.1",
"product_id": "T038638-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:mac_os:sequoia__15.1"
}
}
},
{
"category": "product_version_range",
"name": "Sonoma \u003c14.7.1",
"product": {
"name": "Apple macOS Sonoma \u003c14.7.1",
"product_id": "T038639"
}
},
{
"category": "product_version",
"name": "Sonoma 14.7.1",
"product": {
"name": "Apple macOS Sonoma 14.7.1",
"product_id": "T038639-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:mac_os:sonoma__14.7.1"
}
}
},
{
"category": "product_version_range",
"name": "Ventura \u003c13.7.1",
"product": {
"name": "Apple macOS Ventura \u003c13.7.1",
"product_id": "T038640"
}
},
{
"category": "product_version",
"name": "Ventura 13.7.1",
"product": {
"name": "Apple macOS Ventura 13.7.1",
"product_id": "T038640-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:mac_os:ventura__13.7.1"
}
}
}
],
"category": "product_name",
"name": "macOS"
}
],
"category": "vendor",
"name": "Apple"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-38476",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-38476"
},
{
"cve": "CVE-2024-38477",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-38477"
},
{
"cve": "CVE-2024-39573",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-39573"
},
{
"cve": "CVE-2024-40849",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-40849"
},
{
"cve": "CVE-2024-40854",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-40854"
},
{
"cve": "CVE-2024-40855",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-40855"
},
{
"cve": "CVE-2024-40858",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-40858"
},
{
"cve": "CVE-2024-44122",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44122"
},
{
"cve": "CVE-2024-44126",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44126"
},
{
"cve": "CVE-2024-44137",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44137"
},
{
"cve": "CVE-2024-44144",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44144"
},
{
"cve": "CVE-2024-44156",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44156"
},
{
"cve": "CVE-2024-44159",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44159"
},
{
"cve": "CVE-2024-44175",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44175"
},
{
"cve": "CVE-2024-44194",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44194"
},
{
"cve": "CVE-2024-44195",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44195"
},
{
"cve": "CVE-2024-44196",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44196"
},
{
"cve": "CVE-2024-44197",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44197"
},
{
"cve": "CVE-2024-44200",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44200"
},
{
"cve": "CVE-2024-44201",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44201"
},
{
"cve": "CVE-2024-44211",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44211"
},
{
"cve": "CVE-2024-44212",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44212"
},
{
"cve": "CVE-2024-44213",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44213"
},
{
"cve": "CVE-2024-44215",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44215"
},
{
"cve": "CVE-2024-44216",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44216"
},
{
"cve": "CVE-2024-44218",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44218"
},
{
"cve": "CVE-2024-44219",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44219"
},
{
"cve": "CVE-2024-44222",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44222"
},
{
"cve": "CVE-2024-44223",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44223"
},
{
"cve": "CVE-2024-44229",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44229"
},
{
"cve": "CVE-2024-44231",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44231"
},
{
"cve": "CVE-2024-44232",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44232"
},
{
"cve": "CVE-2024-44233",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44233"
},
{
"cve": "CVE-2024-44234",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44234"
},
{
"cve": "CVE-2024-44236",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44236"
},
{
"cve": "CVE-2024-44237",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44237"
},
{
"cve": "CVE-2024-44239",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44239"
},
{
"cve": "CVE-2024-44240",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44240"
},
{
"cve": "CVE-2024-44241",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44241"
},
{
"cve": "CVE-2024-44242",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44242"
},
{
"cve": "CVE-2024-44244",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44244"
},
{
"cve": "CVE-2024-44247",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44247"
},
{
"cve": "CVE-2024-44248",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44248"
},
{
"cve": "CVE-2024-44250",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44250"
},
{
"cve": "CVE-2024-44253",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44253"
},
{
"cve": "CVE-2024-44254",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44254"
},
{
"cve": "CVE-2024-44255",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44255"
},
{
"cve": "CVE-2024-44256",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44256"
},
{
"cve": "CVE-2024-44257",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44257"
},
{
"cve": "CVE-2024-44259",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44259"
},
{
"cve": "CVE-2024-44260",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44260"
},
{
"cve": "CVE-2024-44264",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44264"
},
{
"cve": "CVE-2024-44265",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44265"
},
{
"cve": "CVE-2024-44267",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44267"
},
{
"cve": "CVE-2024-44269",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44269"
},
{
"cve": "CVE-2024-44270",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44270"
},
{
"cve": "CVE-2024-44273",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44273"
},
{
"cve": "CVE-2024-44275",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44275"
},
{
"cve": "CVE-2024-44277",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44277"
},
{
"cve": "CVE-2024-44278",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44278"
},
{
"cve": "CVE-2024-44279",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44279"
},
{
"cve": "CVE-2024-44280",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44280"
},
{
"cve": "CVE-2024-44281",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44281"
},
{
"cve": "CVE-2024-44282",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44282"
},
{
"cve": "CVE-2024-44283",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44283"
},
{
"cve": "CVE-2024-44284",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44284"
},
{
"cve": "CVE-2024-44285",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44285"
},
{
"cve": "CVE-2024-44286",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44286"
},
{
"cve": "CVE-2024-44287",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44287"
},
{
"cve": "CVE-2024-44289",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44289"
},
{
"cve": "CVE-2024-44290",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44290"
},
{
"cve": "CVE-2024-44292",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44292"
},
{
"cve": "CVE-2024-44293",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44293"
},
{
"cve": "CVE-2024-44294",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44294"
},
{
"cve": "CVE-2024-44295",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44295"
},
{
"cve": "CVE-2024-44296",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44296"
},
{
"cve": "CVE-2024-44297",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44297"
},
{
"cve": "CVE-2024-44298",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44298"
},
{
"cve": "CVE-2024-44299",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44299"
},
{
"cve": "CVE-2024-44301",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44301"
},
{
"cve": "CVE-2024-44302",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44302"
},
{
"cve": "CVE-2024-44303",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-44303"
},
{
"cve": "CVE-2024-54471",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-54471"
},
{
"cve": "CVE-2024-54535",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-54535"
},
{
"cve": "CVE-2024-54538",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-54538"
},
{
"cve": "CVE-2024-54554",
"product_status": {
"known_affected": [
"T038639",
"T038638",
"T038640"
]
},
"release_date": "2024-10-28T23:00:00.000+00:00",
"title": "CVE-2024-54554"
}
]
}
WID-SEC-W-2024-3303
Vulnerability from csaf_certbund - Published: 2024-10-29 23:00 - Updated: 2024-10-29 23:00In Apple Safari bestehen mehrere Schwachstellen. Diese Fehler existieren wegen unsachgemäßer Zustandsverwaltung und unzureichender Validierung in Komponenten wie Downloads und privates Surfen, was den unbefugten Zugriff auf Inhalte und die mögliche Preisgabe von Daten ermöglicht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um bösartige Inhalte herunterzuladen, auf den Browserverlauf zuzugreifen oder Abstürze und Speicherbeschädigungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple Safari <18.1
Apple / Safari
|
<18.1 |
In Apple Safari bestehen mehrere Schwachstellen. Diese Fehler existieren wegen unsachgemäßer Zustandsverwaltung und unzureichender Validierung in Komponenten wie Downloads und privates Surfen, was den unbefugten Zugriff auf Inhalte und die mögliche Preisgabe von Daten ermöglicht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um bösartige Inhalte herunterzuladen, auf den Browserverlauf zuzugreifen oder Abstürze und Speicherbeschädigungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple Safari <18.1
Apple / Safari
|
<18.1 |
In Apple Safari bestehen mehrere Schwachstellen. Diese Fehler existieren wegen unsachgemäßer Zustandsverwaltung und unzureichender Validierung in Komponenten wie Downloads und privates Surfen, was den unbefugten Zugriff auf Inhalte und die mögliche Preisgabe von Daten ermöglicht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um bösartige Inhalte herunterzuladen, auf den Browserverlauf zuzugreifen oder Abstürze und Speicherbeschädigungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple Safari <18.1
Apple / Safari
|
<18.1 |
In Apple Safari bestehen mehrere Schwachstellen. Diese Fehler existieren wegen unsachgemäßer Zustandsverwaltung und unzureichender Validierung in Komponenten wie Downloads und privates Surfen, was den unbefugten Zugriff auf Inhalte und die mögliche Preisgabe von Daten ermöglicht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um bösartige Inhalte herunterzuladen, auf den Browserverlauf zuzugreifen oder Abstürze und Speicherbeschädigungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Apple Safari <18.1
Apple / Safari
|
<18.1 |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Safari ist der auf Apple Ger\u00e4ten eingesetzte Web Browser.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- MacOS X",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-3303 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3303.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-3303 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3303"
},
{
"category": "external",
"summary": "Apple Security Advisory vom 2024-10-29",
"url": "https://lists.apple.com/archives/security-announce/2024/Oct/msg00009.html"
}
],
"source_lang": "en-US",
"title": "Apple Safari: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-10-29T23:00:00.000+00:00",
"generator": {
"date": "2024-10-30T12:08:10.098+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2024-3303",
"initial_release_date": "2024-10-29T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-10-29T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c18.1",
"product": {
"name": "Apple Safari \u003c18.1",
"product_id": "T038691"
}
},
{
"category": "product_version",
"name": "18.1",
"product": {
"name": "Apple Safari 18.1",
"product_id": "T038691-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:apple:safari:18.1"
}
}
}
],
"category": "product_name",
"name": "Safari"
}
],
"category": "vendor",
"name": "Apple"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-44229",
"notes": [
{
"category": "description",
"text": "In Apple Safari bestehen mehrere Schwachstellen. Diese Fehler existieren wegen unsachgem\u00e4\u00dfer Zustandsverwaltung und unzureichender Validierung in Komponenten wie Downloads und privates Surfen, was den unbefugten Zugriff auf Inhalte und die m\u00f6gliche Preisgabe von Daten erm\u00f6glicht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um b\u00f6sartige Inhalte herunterzuladen, auf den Browserverlauf zuzugreifen oder Abst\u00fcrze und Speicherbesch\u00e4digungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T038691"
]
},
"release_date": "2024-10-29T23:00:00.000+00:00",
"title": "CVE-2024-44229"
},
{
"cve": "CVE-2024-44244",
"notes": [
{
"category": "description",
"text": "In Apple Safari bestehen mehrere Schwachstellen. Diese Fehler existieren wegen unsachgem\u00e4\u00dfer Zustandsverwaltung und unzureichender Validierung in Komponenten wie Downloads und privates Surfen, was den unbefugten Zugriff auf Inhalte und die m\u00f6gliche Preisgabe von Daten erm\u00f6glicht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um b\u00f6sartige Inhalte herunterzuladen, auf den Browserverlauf zuzugreifen oder Abst\u00fcrze und Speicherbesch\u00e4digungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T038691"
]
},
"release_date": "2024-10-29T23:00:00.000+00:00",
"title": "CVE-2024-44244"
},
{
"cve": "CVE-2024-44259",
"notes": [
{
"category": "description",
"text": "In Apple Safari bestehen mehrere Schwachstellen. Diese Fehler existieren wegen unsachgem\u00e4\u00dfer Zustandsverwaltung und unzureichender Validierung in Komponenten wie Downloads und privates Surfen, was den unbefugten Zugriff auf Inhalte und die m\u00f6gliche Preisgabe von Daten erm\u00f6glicht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um b\u00f6sartige Inhalte herunterzuladen, auf den Browserverlauf zuzugreifen oder Abst\u00fcrze und Speicherbesch\u00e4digungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T038691"
]
},
"release_date": "2024-10-29T23:00:00.000+00:00",
"title": "CVE-2024-44259"
},
{
"cve": "CVE-2024-44296",
"notes": [
{
"category": "description",
"text": "In Apple Safari bestehen mehrere Schwachstellen. Diese Fehler existieren wegen unsachgem\u00e4\u00dfer Zustandsverwaltung und unzureichender Validierung in Komponenten wie Downloads und privates Surfen, was den unbefugten Zugriff auf Inhalte und die m\u00f6gliche Preisgabe von Daten erm\u00f6glicht. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um b\u00f6sartige Inhalte herunterzuladen, auf den Browserverlauf zuzugreifen oder Abst\u00fcrze und Speicherbesch\u00e4digungen zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T038691"
]
},
"release_date": "2024-10-29T23:00:00.000+00:00",
"title": "CVE-2024-44296"
}
]
}
WID-SEC-W-2024-3461
Vulnerability from csaf_certbund - Published: 2024-11-13 23:00 - Updated: 2025-11-24 23:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Azul Zulu
Azul
|
cpe:/a:azul:zulu:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
RESF Rocky Linux 8
RESF / Rocky Linux
|
cpe:/o:resf:rocky_linux:8
|
8 | |
|
Red Hat Enterprise Linux
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Red Hat Enterprise Linux <9.4
Red Hat / Enterprise Linux
|
<9.4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Azul Zulu
Azul
|
cpe:/a:azul:zulu:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
RESF Rocky Linux 8
RESF / Rocky Linux
|
cpe:/o:resf:rocky_linux:8
|
8 | |
|
Red Hat Enterprise Linux
Red Hat / Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Red Hat Enterprise Linux <9.4
Red Hat / Enterprise Linux
|
<9.4 |
{
"document": {
"aggregate_severity": {
"text": "niedrig"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Red Hat Enterprise Linux (RHEL) ist eine popul\u00e4re Linux-Distribution.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (WebKitGTK) ausnutzen, um beliebigen Code auszuf\u00fchren und einen Denial-of-Service-Zustand zu erzeugen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-3461 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3461.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-3461 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3461"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2024-11-13",
"url": "https://access.redhat.com/errata/RHSA-2024:9545"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:9637 vom 2024-11-14",
"url": "https://access.redhat.com/errata/RHSA-2024:9637"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:9638 vom 2024-11-14",
"url": "https://access.redhat.com/errata/RHSA-2024:9638"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:9680 vom 2024-11-14",
"url": "https://access.redhat.com/errata/RHSA-2024:9680"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-9636 vom 2024-11-18",
"url": "http://linux.oracle.com/errata/ELSA-2024-9636.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:9553 vom 2024-11-16",
"url": "https://rhn.redhat.com/errata/RHSA-2024:9553.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7113-1 vom 2024-11-18",
"url": "https://ubuntu.com/security/notices/USN-7113-1"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2024:9636 vom 2024-11-19",
"url": "https://errata.build.resf.org/RLSA-2024:9636"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-9553 vom 2024-11-21",
"url": "http://linux.oracle.com/errata/ELSA-2024-9553.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3961 vom 2024-11-22",
"url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00019.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:4167-1 vom 2024-12-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-December/019909.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:4079-2 vom 2024-12-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-December/019967.html"
},
{
"category": "external",
"summary": "Azul Zulu builds of OpenJDK vom 2025-04-15",
"url": "https://docs.azul.com/core/pdfs/april-2025/azul-zulu-ca-release-notes-april-2025-rev1.0.pdf"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2869 vom 2025-05-29",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2869.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:02088-1 vom 2025-06-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021640.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:10364 vom 2025-07-07",
"url": "https://access.redhat.com/errata/RHSA-2025:10364"
},
{
"category": "external",
"summary": "Gentoo Linux Security Advisory GLSA-202511-02 vom 2025-11-25",
"url": "https://security.gentoo.org/glsa/202511-02"
}
],
"source_lang": "en-US",
"title": "Red Hat Enterprise Linux (WebKitGTK): Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-11-24T23:00:00.000+00:00",
"generator": {
"date": "2025-11-25T09:12:53.294+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2024-3461",
"initial_release_date": "2024-11-13T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-11-13T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-11-14T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-11-17T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-11-18T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-11-19T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2024-11-21T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-12-04T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-12-08T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-04-15T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2025-05-29T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2025-06-24T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-07-06T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-11-24T23:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Gentoo aufgenommen"
}
],
"status": "final",
"version": "13"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Azul Zulu",
"product": {
"name": "Azul Zulu",
"product_id": "T034269",
"product_identification_helper": {
"cpe": "cpe:/a:azul:zulu:-"
}
}
}
],
"category": "vendor",
"name": "Azul"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Gentoo Linux",
"product": {
"name": "Gentoo Linux",
"product_id": "T012167",
"product_identification_helper": {
"cpe": "cpe:/o:gentoo:linux:-"
}
}
}
],
"category": "vendor",
"name": "Gentoo"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "8",
"product": {
"name": "RESF Rocky Linux 8",
"product_id": "T039270",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:8"
}
}
}
],
"category": "product_name",
"name": "Rocky Linux"
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.4",
"product": {
"name": "Red Hat Enterprise Linux \u003c9.4",
"product_id": "T039134"
}
},
{
"category": "product_version",
"name": "9.4",
"product": {
"name": "Red Hat Enterprise Linux 9.4",
"product_id": "T039134-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9.4"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-44244",
"product_status": {
"known_affected": [
"T034269",
"2951",
"T002207",
"T039270",
"67646",
"T000126",
"398363",
"T012167",
"T004914",
"T039134"
]
},
"release_date": "2024-11-13T23:00:00.000+00:00",
"title": "CVE-2024-44244"
},
{
"cve": "CVE-2024-44296",
"product_status": {
"known_affected": [
"T034269",
"2951",
"T002207",
"T039270",
"67646",
"T000126",
"398363",
"T012167",
"T004914",
"T039134"
]
},
"release_date": "2024-11-13T23:00:00.000+00:00",
"title": "CVE-2024-44296"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.