CVE-2024-44308 — Apple Multiple Products Code Execution Vulnerability
CVE-2024-44308: Apple Multiple Products Code Execution Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Apple |
| Product | Multiple Products |
| Date added | 2024-11-21 |
| Due date | 2024-12-12 |
| Ransomware campaign use | Unknown |
Description
Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.
Required action (CISA)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://support.apple.com/en-us/121752, https://support.apple.com/en-us/121753, https://support.apple.com/en-us/121754, https://support.apple.com/en-us/121755, https://support.apple.com/en-us/121756 ; https://nvd.nist.gov/vuln/detail/CVE-2024-44308
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-44308
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog