Firetruck

CVE-2024-44309

KEV
Updated Apr 2, 2026 · PUBLISHED
View KEV entry →

Description

Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= 0, < 17.7.2affected
iOS and iPadOSApple / iOS and iPadOS>= 0, < 18.1.1affected
ipad_osapple / ipad_os>= 0, < 17.7affected
ipad_osapple / ipad_os>= 0, < 17.7affected
ipad_osapple / ipad_os>= 18.0, < 18.1affected
ipad_osapple / ipad_os>= 18.0, < 18.1affected
iphone_osapple / iphone_os>= 0, < 17.7affected
iphone_osapple / iphone_os>= 0, < 17.7affected
iphone_osapple / iphone_os>= 18.0, < 18.1affected
iphone_osapple / iphone_os>= 18.0, < 18.1affected
macosapple / macos>= 0, < 15.1affected
macOSApple / macOS>= 0, < 15.1.1affected
safariapple / safari>= 0, < 18.1affected
SafariApple / Safari>= 0, < 18.1.1affected
visionosapple / visionos>= 0, < 2.1affected
visionOSApple / visionOS>= 0, < 2.1.1affected