Apple Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution and cross-site scripting on the targeted system.

Note:

CVE-2024-44308 and CVE-2024-44309 are actively exploited in the wild. Attacker can exploit these vulnerabilities to achieve arbitrary code execution and cross-site scripting attack through malicious crafted web content respectively. 

Impact

• Remote Code Execution
• Cross-Site Scripting

System / Technologies affected

• Versions prior to macOS Sequoia 15.1.1
• Versions prior to iOS 17.7.2 and iPadOS 17.7.2
• Versions prior to iOS 18.1.1 and iPadOS 18.1.1
• Versions prior to visionOS 2.1.1
• Versions prior to Safari 18.1.1

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• macOS Sequoia 15.1.1
• iOS 17.7.2 and iPadOS 17.7.2
• iOS 18.1.1 and iPadOS 18.1.1
• visionOS 2.1.1
• Safari 18.1.1

Vulnerability Identifier

• CVE-2024-44308
• CVE-2024-44309

Source

• Apple

Related Link

• https://support.apple.com/en-us/121752
• https://support.apple.com/en-us/121753
• https://support.apple.com/en-us/121754
• https://support.apple.com/en-us/121755
• https://support.apple.com/en-us/121756