CVE-2024-44296

MEDIO 5.4CVE-2024-44296 · Published 28/10/2024 · updated 17/06/2026

En resumen

CVE-2024-44296 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a safari (apple).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.66%, mayor que el 51.7% de las vulnerabilidades.
Solución: actualizar a 18.1 o posterior.

Package	Affected versions	Patched versions
safari apple	`< 18.1`	`18.1`

Description

The issue was addressed with improved checks. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

References

support.apple.com/en-us/121563 · Vendor Advisory
support.apple.com/en-us/121564 · Vendor Advisory
support.apple.com/en-us/121565 · Vendor Advisory
support.apple.com/en-us/121566 · Vendor Advisory
support.apple.com/en-us/121567 · Vendor Advisory
support.apple.com/en-us/121569 · Vendor Advisory
support.apple.com/en-us/121571 · Vendor Advisory
seclists.org/fulldisclosure/2024/Oct/11
seclists.org/fulldisclosure/2024/Oct/16
seclists.org/fulldisclosure/2024/Oct/19
seclists.org/fulldisclosure/2024/Oct/9
lists.debian.org/debian-lts-announce/2024/11/msg00019.html

Más vulnerabilidades de safari

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 18.1

18.1

Más vulnerabilidades de safari

Ver todo →