{"id":"CVE-2024-44308","kind":"vulnerability","aliases":["CVE-2024-44308"],"related":[],"title":"The issue was addressed with improved checks","description":"The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.","summary":"Apple iOS, macOS and other Apple products have an unspecified flaw in how they process malicious web content. An attacker who gets a user to load a crafted web page can run arbitrary code on the device.","severity":"critical","cvss":8.8,"epss":null,"exploited":true,"exploited_at":"2024-11-21T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"debian linux","fixed":[],"affected":"= 11.0","ecosystem":"vendor"},{"name":"apple safari","fixed":["18.1.1"],"affected":"< 18.1.1","ecosystem":"vendor"},{"name":"apple ipados","fixed":["17.7.2"],"affected":"< 17.7.2","ecosystem":"vendor"},{"name":"apple ipados","fixed":["18.1.1"],"affected":">= 18.0, < 18.1.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["17.7.2"],"affected":"< 17.7.2","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["18.1.1"],"affected":">= 18.0, < 18.1.1","ecosystem":"vendor"},{"name":"apple macos","fixed":["15.1.1"],"affected":">= 15.0, < 15.1.1","ecosystem":"vendor"},{"name":"apple visionos","fixed":["2.1.1"],"affected":"< 2.1.1","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","ios","macos","safari","vendor"],"not_affected_if":["unknown"],"how_to_check":"Check the installed OS version on each Apple device against Apple's security notes for this CVE; the sources do not name the fixed versions.","fix":"Update iOS, iPadOS, macOS and other affected Apple products to the latest release that Apple lists as fixing CVE-2024-44308.\nIf an update is not possible, follow Apple's vendor mitigation instructions as required by CISA.","status":"open","published_at":"2024-11-20T00:15:17+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:56:08+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T20:56:08Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS, iPadOS, macOS and other affected Apple products to the latest release that Apple lists as fixing CVE-2024-44308.\nIf an update is not possible, follow Apple's vendor mitigation instructions as required by CISA.","reach":"internet","impact":"high","summary":"Apple iOS, macOS and other Apple products have an unspecified flaw in how they process malicious web content. An attacker who gets a user to load a crafted web page can run arbitrary code on the device.","category":"vendor","who_cares":["ios","macos","safari","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the device after a user visits a malicious page.","analyst_note":"Find Apple's security content page for CVE-2024-44308 to get the exact fixed iOS, macOS and other product versions and confirm the attack trigger.","how_to_check":"Check the installed OS version on each Apple device against Apple's security notes for this CVE; the sources do not name the fixed versions.\nunknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"critical"},"cost_usd":0.000494,"input_tokens":2814,"output_tokens":425,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2024':9A,12A '-44308':10A,13A '15.1.1':106C '17.7.2':95C,98C '18.1.1':93C,100C,103C '2.1.1':108C 'activ':132C 'address':4A,83C 'appl':36B,43B,48B,120C 'apple':14A,19A,21A,23A,25A,28A,31A,33A 'apple-devic':35B 'arbitrari':75B,117C 'attack':62B 'awar':122C 'base':137C 'check':7A,86C 'code':76B,118C 'content':60B,113C 'craft':70B,111C 'cve':8A,11A 'debian':17A 'devic':37B,79B 'execut':119C 'exploit':38B,133C 'fix':90C 'flaw':53B 'get':64B 'improv':6A,85C 'intel':136C 'intel-bas':135C 'io':39B,44B,94C,99C 'ipado':97C,102C 'ipados':22A,24A 'iphone':26A,29A 'issu':2A,81C,88C,128C 'lead':115C 'linux':18A 'load':68B 'mac':138C 'maco':40B,45B,104C 'macos':32A 'malici':58B,110C 'may':114C,129C 'multiple':15A 'os':27A,30A 'page':72B 'process':57B,109C 'product':49B 'products':16A 'report':125C 'run':74B 'safari':20A,41B,92C 'sequoia':105C 'system':139C 'unspecifi':52B 'user':66B 'vendor':42B 'visiono':107C 'visionos':34A 'web':59B,71B,112C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-11-20T00:15:17+00:00","kev":{"dateAdded":"2024-11-21","dueDate":"2024-12-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-44308","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-44308","severity":null,"published_at":"2024-11-21T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T14:39:38+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-44308","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44308","severity":null,"published_at":"2024-11-20T00:15:17+00:00","modified_at":"2026-06-17T07:52:45+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}