CVE-2024-44155

MÉDIO 6.5CVE-2024-44155 · Published 28/10/2024 · updated 17/06/2026

Em resumo

CVE-2024-44155 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta safari (apple).
Chance de exploração nos próximos 30 dias (EPSS): 0.56%, maior que 46.5% das vulnerabilidades.
Correção: atualize para 18.0 ou posterior.

Package	Affected versions	Patched versions
safari apple	`< 18.0`	`18.0`

Description

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. Maliciously crafted web content may violate iframe sandboxing policy.

References

support.apple.com/en-us/121238 · Release Notes
support.apple.com/en-us/121240 · Release Notes
support.apple.com/en-us/121241 · Release Notes
support.apple.com/en-us/121250 · Release Notes
support.apple.com/en-us/121567 · Release Notes
seclists.org/fulldisclosure/2024/Oct/10

Mais vulnerabilidades de safari

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 18.0

18.0

Mais vulnerabilidades de safari

Ver tudo →