CVE-2024-44185

MEDIUM

Safari < 17.6 - Denial of Service via Malicious Web Content

Title source: llm

Description

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.

References (7)

Core 7

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2024/11/msg00019.html

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120909

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120911

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120913

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120914

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120915

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120916

Scores

CVSS v3 5.5

EPSS 0.0003

EPSS Percentile 10.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (13)

Apple/iOS and iPadOS < 17.6

apple/ipados < 17.6

apple/iphone_os < 17.6

apple/macos < 14.6

Apple/macOS < 14.6

apple/safari < 17.6

Apple/Safari < 17.6

apple/tvos < 17.6

Apple/tvOS < 17.6

apple/visionos < 1.3

... and 3 more

Published Oct 24, 2024

Tracked Since Feb 18, 2026