Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

概要

参考情報

• support.apple.com/en-us/121752 · Vendor Advisory
• support.apple.com/en-us/121753 · Vendor Advisory
• support.apple.com/en-us/121754 · Vendor Advisory
• support.apple.com/en-us/121755 · Vendor Advisory
• support.apple.com/en-us/121756 · Vendor Advisory
• seclists.org/fulldisclosure/2024/Nov/16 · Mailing List
• lists.debian.org/debian-lts-announce/2024/12/msg00003.html · Mailing List
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-44309

safari のその他の脆弱性

• CVE-2026-86898中 5.4A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, vi…
• CVE-2026-86897中 5.5This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 2…
• CVE-2026-84635中 6.5A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tv…
• CVE-2026-84518中 4.3This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A …
• CVE-2026-65391高 8.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1…