- Vendor / Project
- Apple
- Product
- Multiple Products
- Date added
- Nov 21, 2024
- Due date
- Dec 12, 2024
- Known ransomware use
- Unknown
- CWEs
- CWE-79
Description
Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.