Apple Products Multiple Vulnerabilities
Release Date: 20 Nov 2024
RISK: Extremely High Risk
TYPE: Operating Systems - Mobile & Apps
Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution and cross-site scripting on the targeted system.
Note:
CVE-2024-44308 and CVE-2024-44309 are actively exploited in the wild. Attacker can exploit these vulnerabilities to achieve arbitrary code execution and cross-site scripting attack through malicious crafted web content respectively.
Impact
- Remote Code Execution
- Cross-Site Scripting
System / Technologies affected
- Versions prior to macOS Sequoia 15.1.1
- Versions prior to iOS 17.7.2 and iPadOS 17.7.2
- Versions prior to iOS 18.1.1 and iPadOS 18.1.1
- Versions prior to visionOS 2.1.1
- Versions prior to Safari 18.1.1
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- macOS Sequoia 15.1.1
- iOS 17.7.2 and iPadOS 17.7.2
- iOS 18.1.1 and iPadOS 18.1.1
- visionOS 2.1.1
- Safari 18.1.1
沒有留言:
發佈留言