---
id: "CVE-2024-44308"
kind: "vulnerability"
aliases: ["CVE-2024-44308"]
title: "The issue was addressed with improved checks"
severity: "critical"
cvss: 8.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Apple Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "debian linux", "fixed": [], "affected": "= 11.0", "ecosystem": "vendor"}, {"name": "apple safari", "fixed": ["18.1.1"], "affected": "< 18.1.1", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["17.7.2"], "affected": "< 17.7.2", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["18.1.1"], "affected": ">= 18.0, < 18.1.1", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["17.7.2"], "affected": "< 17.7.2", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["18.1.1"], "affected": ">= 18.0, < 18.1.1", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["15.1.1"], "affected": ">= 15.0, < 15.1.1", "ecosystem": "vendor"}, {"name": "apple visionos", "fixed": ["2.1.1"], "affected": "< 2.1.1", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apple-devices", "exploited", "ios", "macos", "safari", "vendor"]
not_affected_if: ["unknown"]
published_at: "2024-11-20T00:15:17+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-44308", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44308", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# The issue was addressed with improved checks

Apple iOS, macOS and other Apple products have an unspecified flaw in how they process malicious web content. An attacker who gets a user to load a crafted web page can run arbitrary code on the device.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple Multiple Products affected ? fixed ?
- vendor:debian linux affected = 11.0 fixed ?
- vendor:apple safari affected < 18.1.1 fixed 18.1.1
- vendor:apple ipados affected < 17.7.2 fixed 17.7.2
- vendor:apple ipados affected >= 18.0, < 18.1.1 fixed 18.1.1
- vendor:apple iphone os affected < 17.7.2 fixed 17.7.2
- vendor:apple iphone os affected >= 18.0, < 18.1.1 fixed 18.1.1
- vendor:apple macos affected >= 15.0, < 15.1.1 fixed 15.1.1
- vendor:apple visionos affected < 2.1.1 fixed 2.1.1

## How to check

Check the installed OS version on each Apple device against Apple's security notes for this CVE; the sources do not name the fixed versions.

## Fix

Update iOS, iPadOS, macOS and other affected Apple products to the latest release that Apple lists as fixing CVE-2024-44308.
If an update is not possible, follow Apple's vendor mitigation instructions as required by CISA.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-44308
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-44308

## From the sources

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_